Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          sZKgB2zablN+jdy3BeFkEp0xAIugWuEAf5ohtFixCCo=
Subject key identifier:   24:3B:D4:4F:E5:11:A0:B1:E8:3C:99:F0:1A:52:50:E8:DB:AB:EF:01
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       01962E61CDDDE9C8344B4EA919AF406170A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          031C
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: C4jXznWsLs696oUejvyt17EV23Rl6rzwy1ihNgfb7a4=)
                          2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:dd:e9:c8:34:4b:4e:a9:19:af:40:61:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=243bd44fe511a0b1e83c99f01a5250e8dbabef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:68:a5:9c:67:cd:37:22:6e:ec:95:f7:2f:
                    bf:ed:80:e3:7d:f2:ac:16:6a:01:3f:5a:ee:97:f0:
                    ea:98:7a:ac:e3:7b:a4:a7:6c:7d:83:af:da:06:c9:
                    0e:3a:d2:6e:b3:25:5c:bb:5c:9e:a1:b0:c4:92:79:
                    44:9a:81:41:4b:20:25:ad:32:3c:3a:95:3e:ea:8a:
                    f0:66:39:fa:31:33:62:87:67:72:45:6b:d6:f7:01:
                    7e:65:59:f4:0a:d7:a6:58:ff:f1:4e:39:4f:8a:d4:
                    dc:a9:c8:33:f1:3c:a7:cd:90:d3:64:54:2c:2d:a0:
                    6e:a6:84:b3:95:02:00:a0:68:33:b5:37:57:33:52:
                    9c:42:50:c9:45:5c:a4:25:1f:2e:53:77:80:67:d9:
                    b1:93:01:89:c1:f5:41:f0:ee:d4:df:d3:da:2b:52:
                    5e:0f:a8:0a:da:44:19:9d:11:5f:11:e1:da:a4:88:
                    9c:29:e7:8e:16:86:95:18:81:c9:3c:5e:bb:04:b9:
                    a2:d5:0c:25:16:72:a7:83:0a:77:3a:da:c8:99:fc:
                    5a:d1:2c:e5:2d:f6:95:82:e5:d6:ee:e9:2f:38:b0:
                    d6:95:6a:46:97:5d:26:f4:50:a5:50:26:64:c9:8b:
                    70:f0:29:b5:f3:9f:0b:b7:51:d5:95:de:07:78:7c:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3B:D4:4F:E5:11:A0:B1:E8:3C:99:F0:1A:52:50:E8:DB:AB:EF:01
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:7a:1d:11:29:ef:0e:80:29:2a:54:0c:3a:51:61:7b:4e:
         56:75:3d:4e:ba:65:79:74:40:81:06:49:58:27:bf:46:d6:19:
         ab:a8:7e:c9:e5:60:27:8f:f2:9f:ba:88:58:b9:96:46:98:8c:
         80:c5:dd:2a:2e:e1:3c:5d:8c:9f:be:91:aa:ad:8a:4c:9e:4e:
         38:46:c0:e3:45:48:1e:5a:a3:93:3b:f1:e7:7d:bc:66:a6:d5:
         7e:d4:76:9b:07:28:07:71:1f:a9:84:7d:f2:6e:fd:49:6c:66:
         d7:f3:12:88:dd:67:bb:7b:62:16:8a:2e:ea:6f:b6:7b:66:bd:
         e0:03:75:32:b1:4a:3e:2a:78:7a:d0:79:3b:59:8d:a8:48:1a:
         25:6f:ca:2a:aa:bc:2f:c1:93:8b:13:60:fa:60:63:a2:cb:60:
         1e:af:cf:c8:af:df:a4:6f:cf:ae:14:09:55:a7:be:10:da:17:
         b8:34:51:ac:b4:35:96:de:f2:18:b1:b8:00:d8:1e:32:94:42:
         4a:1b:73:e0:1b:6a:74:cc:c9:fd:a3:f5:f0:13:6d:82:9e:08:
         9f:1e:14:42:24:24:e6:20:7c:6c:c5:79:75:ca:13:ff:fc:3d:
         cd:d6:8b:13:fd:f8:7f:ac:e1:c8:6a:a1:6a:38:72:55:50:f7:
         53:45:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----