Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File:                     _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier:          LHsUCbIKY8mOqTiI6zY70/DqGLIkKGtOUxtXUhWaGN4=
Subject key identifier:   D3:D7:01:31:31:B4:D0:09:31:59:B4:7B:EB:01:A2:5D:53:EC:13:E4
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer:       /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial:       01962F3D8763427FA9E6E21ACF291E1E7952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number:          061C
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: RPQbOHDP5f9n1By4mqwH4fhw1TI.roa (hash: kv9hMH16A1aRfv7UIsyvQ2bwSOQjVyvOtNY7blCGEj4=)
                          2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: 0kBNXk+RLxWj5y9xnGqxCVhZwPV7CXrdvo2HPAHK5Vk=)
                          3: wz8UbUwzL3_klN4f7OgBtXQAE0o.roa (hash: tVZRRH50Unry3OLtaAmUSG+/0ObBliH9W0a4ti8eLaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:63:42:7f:a9:e6:e2:1a:cf:29:1e:1e:79:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=d3d7013131b4d0093159b47beb01a25d53ec13e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:1c:a7:61:50:b8:6f:f6:19:90:9a:74:18:
                    35:ca:92:13:7f:cd:55:cb:d5:ad:f1:73:06:15:3c:
                    8d:24:65:28:23:84:5d:ec:b8:c3:18:fb:ca:60:7e:
                    9c:63:c2:94:fb:fd:f6:df:92:9d:66:24:40:7e:0c:
                    ad:54:3b:23:ee:83:0d:6d:28:db:11:cd:dc:7f:ca:
                    2d:4e:23:29:a5:ec:19:a5:77:93:89:42:f3:4a:fb:
                    4e:14:4c:9b:3d:14:d6:6c:07:fb:ab:7c:63:e7:46:
                    b6:e6:7e:6d:fd:29:f7:47:96:cc:6e:91:e6:97:f9:
                    ea:99:1f:12:8c:58:fb:33:ae:ce:b4:b2:65:84:24:
                    fb:f9:d4:05:4f:c0:b8:a3:76:5f:bd:0b:6c:ee:35:
                    7e:30:2b:fe:07:d1:b3:14:49:cc:e2:c7:b2:ff:99:
                    e8:d6:2b:2b:53:06:26:98:24:43:91:d6:83:6a:cc:
                    2e:c7:29:ff:dd:76:6b:f2:c8:39:43:f8:47:66:92:
                    11:f7:c7:e1:4b:19:bf:67:fd:6b:f3:0e:46:33:62:
                    19:61:db:70:f2:08:83:d9:0f:ee:41:65:95:58:0a:
                    c9:eb:29:08:36:20:21:7e:0e:7a:7d:b6:d1:55:8f:
                    2e:d3:10:48:5d:21:54:c8:0a:b8:bf:ac:0f:ca:a2:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D7:01:31:31:B4:D0:09:31:59:B4:7B:EB:01:A2:5D:53:EC:13:E4
            X509v3 Authority Key Identifier:
                keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:70:d0:5c:b0:1a:4e:a7:3b:a7:49:f8:94:de:ec:dc:f3:
         9c:be:cf:81:e9:f3:66:05:26:a8:76:7f:b6:e5:84:9a:51:99:
         05:5d:81:19:cb:78:14:8d:2d:ff:f0:d9:01:f9:a7:e6:16:47:
         bb:dd:7c:4b:61:f8:e7:6e:76:c5:0e:79:78:06:19:75:7f:2a:
         47:b2:be:fa:3a:7e:3f:7a:af:4c:4e:a9:00:1a:f4:9e:31:48:
         df:72:00:ab:bd:a5:8d:cf:10:e8:49:07:5b:ee:e9:c5:53:d3:
         9d:91:4d:e9:0d:3e:c6:b0:e0:2c:8f:a7:a5:bf:2a:73:94:28:
         09:0f:3a:e7:7d:a9:58:55:b5:98:b3:b7:05:8b:cb:c6:37:af:
         bd:b0:1c:6c:1f:fb:ec:42:f1:e7:8b:f4:1c:40:f2:8d:68:51:
         b1:29:a0:14:8e:1c:0e:1a:88:f8:06:d4:02:4d:f1:85:b3:4b:
         0d:a4:ac:5c:ef:ae:18:39:e0:96:7f:2d:e0:b7:42:02:cc:2c:
         14:34:3e:29:aa:69:5f:37:e7:5e:6e:c0:16:37:eb:bd:87:90:
         9e:7b:59:b2:eb:99:50:31:75:7a:7c:8b:08:1f:3e:40:a1:50:
         0e:9e:40:56:c2:fe:c3:66:a2:ac:11:d2:32:e9:4f:0a:99:cf:
         3c:64:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----