Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File:                     D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier:          BPK7VJHoxPsmAJzC6VaBt3Y0hTG8s6EXasO3mvuGPrs=
Subject key identifier:   FB:6B:2A:99:26:E4:1E:E2:D1:68:6E:64:ED:57:51:FF:B3:DF:C0:3F
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer:       /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial:       01962E99274D8B08F90BCD138D375E828CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number:          07B3
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: MAfyJUjqm1D7Ft9lZaSzUOmif44ZQT/sgigfRDriJCQ=)
                          2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:4d:8b:08:f9:0b:cd:13:8d:37:5e:82:8c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=fb6b2a9926e41ee2d1686e64ed5751ffb3dfc03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:1b:7b:2b:75:78:a8:e7:f0:14:a2:81:52:
                    88:b5:32:93:2a:75:ee:36:68:9a:6c:94:00:74:7d:
                    b8:32:8c:2b:a2:5c:05:9b:a9:d0:1c:9a:e3:7d:9e:
                    ac:18:5e:00:1f:b5:b4:40:a6:9d:89:14:74:3e:e1:
                    02:b4:32:8c:42:68:34:ee:48:e2:8e:a2:da:fd:8e:
                    e7:a5:b2:0a:3b:4d:ba:4a:3e:70:30:ae:75:42:09:
                    b2:c4:c5:59:a8:b7:04:f5:76:66:41:72:f5:b2:42:
                    7f:62:34:fb:3d:ff:eb:66:77:4d:19:ca:63:8b:c4:
                    c3:2f:c0:5d:64:a7:6d:4e:7b:a9:9f:f5:dc:cc:61:
                    49:d4:22:30:2f:84:df:b2:f5:e0:fd:3f:ea:84:cd:
                    27:27:b7:86:3f:9b:29:98:2f:a9:78:62:e2:4a:07:
                    94:7c:49:93:d8:77:8e:87:40:fc:7f:e3:cb:30:fd:
                    ff:a5:d0:a6:70:bb:f1:da:bc:9e:3d:13:0c:e1:38:
                    a0:30:1d:b0:36:24:07:0c:da:36:51:0e:20:94:6c:
                    56:8c:37:8e:ad:7e:7b:8a:dc:ae:de:65:91:6d:a3:
                    5d:33:90:96:f3:4f:19:c2:4c:03:d7:39:62:ca:3d:
                    fd:f8:66:19:8c:51:9f:69:01:3f:0c:bd:ec:d1:04:
                    f4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:2A:99:26:E4:1E:E2:D1:68:6E:64:ED:57:51:FF:B3:DF:C0:3F
            X509v3 Authority Key Identifier:
                keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:61:ce:83:3b:8b:1e:2a:0c:e2:7b:4c:ac:39:2f:2e:2b:
         6d:95:37:bd:42:75:95:37:b7:2c:f9:e5:2b:9c:82:56:32:71:
         e6:a6:f4:82:49:cb:42:60:68:c3:b6:94:3d:c4:7c:c6:fb:c8:
         8b:38:b0:32:af:a8:91:9d:ee:68:b4:28:b4:c8:c9:68:b1:63:
         cd:03:67:8f:81:1f:d4:a0:48:18:a6:e6:fd:62:c3:b7:b1:5f:
         20:f0:aa:20:30:2b:46:d1:28:a9:2f:9e:7e:a6:a5:10:12:77:
         dc:2f:27:fc:0a:5c:d9:19:67:b0:55:ad:de:9f:c3:70:a0:6d:
         e4:96:9a:ea:66:77:5f:23:e1:06:d2:7c:25:2e:5a:76:2e:d8:
         2e:49:e5:bb:8a:ca:bc:8f:0e:04:1a:b3:3f:22:36:4c:95:e4:
         d7:67:16:db:1b:a2:84:c5:f2:8b:69:66:0b:79:43:b0:0e:34:
         99:97:b3:ab:f2:ef:86:4c:09:2c:28:c4:fe:f0:24:3b:07:49:
         44:74:e9:2b:5b:b8:dc:a5:ce:f2:b3:b2:5a:64:01:9e:ba:ed:
         f3:4c:c0:c4:42:aa:65:f1:98:61:87:4e:44:4d:ee:9a:82:3b:
         73:43:11:22:07:66:39:00:f0:d3:ba:ad:e0:fd:63:7b:7d:22:
         36:c0:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----