Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File:                     f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier:          /FHhTgA5XBgEovDispjVPwJhw+Htq1qWjh6TTO0hnE4=
Subject key identifier:   63:F5:E7:4E:04:FB:64:26:50:76:22:00:17:56:01:D3:11:10:D5:76
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer:       /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial:       01962ECFD20E8C1DDCBF34DCA6B771417EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number:          0C5A
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: D01XO6tQPbuMBLlDyeTDLpHZditNnucVTCo7jk5UImY=)
                          2: uNHn3nGofmcHl4lM7HkivQe_5zI.roa (hash: P5wPJ1eLs+Pe8c3zQ6YiOWLNnnfuv2xAEXiikikIGBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d2:0e:8c:1d:dc:bf:34:dc:a6:b7:71:41:7e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=63f5e74e04fb642650762200175601d31110d576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:12:b2:54:a2:78:68:0e:6b:6b:ed:5d:16:
                    0e:45:10:ec:9d:c6:49:e7:97:ee:0d:e5:fb:a5:9f:
                    2e:03:18:65:0d:d5:65:41:68:45:14:71:76:f1:58:
                    c1:4b:09:4b:55:d3:40:b1:5f:3b:b0:47:bf:4d:cb:
                    1b:31:f6:72:73:0a:ef:41:64:e7:63:4c:96:09:c4:
                    f8:37:e0:7c:1a:03:b0:44:b3:69:f2:c4:70:1a:6a:
                    09:a0:82:49:7d:24:86:45:61:5e:67:8d:46:0d:c3:
                    93:cd:5a:e5:b0:e9:69:09:d3:c7:fe:4c:4c:60:ce:
                    b8:13:d0:92:0b:fd:38:18:0e:5e:a1:f0:df:9b:ec:
                    8d:64:bf:d3:8a:79:bb:3e:83:ee:a8:4b:a5:88:38:
                    e2:67:b9:bd:39:2a:4e:3f:b9:16:26:06:8d:6d:49:
                    67:e8:ff:9c:a0:46:2f:3d:30:1a:2c:4d:07:a2:83:
                    bf:c5:f5:24:75:c2:67:cd:67:46:ba:3c:68:eb:a5:
                    8c:90:29:c1:fb:54:49:9d:79:6b:ed:e2:0f:71:2e:
                    9d:42:70:64:50:10:8f:72:6e:25:7f:71:b1:60:fb:
                    a9:2d:4a:29:a1:03:f1:3b:53:d9:8d:5f:91:c7:fb:
                    81:4c:90:06:8e:67:b8:ad:fc:d5:de:ee:0f:49:b7:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:E7:4E:04:FB:64:26:50:76:22:00:17:56:01:D3:11:10:D5:76
            X509v3 Authority Key Identifier:
                keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:83:a2:ea:c4:92:0c:76:7b:be:1a:6a:3b:79:8d:86:14:4a:
         32:ed:c7:b2:45:10:6c:c9:5f:bf:4c:88:fe:33:d4:97:98:8d:
         5e:8e:fc:32:ef:40:b5:99:1c:3a:01:bb:6c:f1:6b:95:39:d2:
         72:6f:f0:10:be:fc:16:ee:02:11:8d:b5:27:3a:d1:bd:b3:ab:
         ea:79:2d:0b:bd:cb:fa:d2:0e:9f:47:56:40:19:c5:4e:c5:1e:
         57:11:ee:9e:09:7a:5c:1a:7e:39:82:5c:16:a6:c0:86:5b:c0:
         07:b6:49:e5:4b:cc:0b:5f:ad:be:87:4c:fb:dc:a4:8d:bd:91:
         a6:4f:18:d9:71:f2:19:ec:f7:bb:82:0f:a4:0c:1c:20:77:64:
         27:11:7b:ae:3e:0a:39:2f:6a:e0:44:f9:e6:38:05:c9:5b:dd:
         b1:c6:e5:8c:1d:cd:8b:2d:51:21:73:b4:f5:4e:2e:5f:f7:c5:
         6e:55:73:08:c6:4f:ae:1b:ed:6e:02:25:cd:6e:09:60:ce:6e:
         42:df:c4:d2:44:22:01:69:0c:bb:45:5f:04:49:b5:36:e5:48:
         a3:8d:d6:00:ea:9c:d6:4e:89:64:ba:f6:5b:bd:ed:24:15:d7:
         13:0c:68:f4:c1:06:ca:a3:f3:1d:17:d7:82:83:52:d1:9c:78:
         19:c9:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----