Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          CMNV1cMmTIj+WK8Ii1o2o1UMV811q3Oc15p2Kzuw6DE=
Subject key identifier:   24:A5:F0:66:7B:8F:BD:D2:6A:38:B9:BE:D0:E6:49:18:C3:AC:7E:F8
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       01962FAB49A673B3E1578DA8103EA059CD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          11BD
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: FWYu8RcB5qIRPeeY4ia7nHrIDdcd/5jBKhJeWzdcXKg=)
                          2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:a6:73:b3:e1:57:8d:a8:10:3e:a0:59:cd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=24a5f0667b8fbdd26a38b9bed0e64918c3ac7ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:85:6f:13:3b:fc:f8:0b:b9:e5:1d:15:ff:
                    98:a1:a7:91:a9:3d:aa:46:0c:fb:e0:af:ea:f2:b8:
                    b9:1f:e9:63:52:57:73:a9:56:4c:7d:60:65:d7:4b:
                    ff:b7:dd:d5:ff:76:30:3f:3d:18:9e:af:8a:6b:9c:
                    ae:d5:7e:96:9b:2f:21:6a:c7:c8:2b:68:27:65:7a:
                    08:e6:9e:f5:e1:31:e2:68:a7:d7:0a:bc:81:c6:0c:
                    cb:cf:98:7e:6b:81:4e:47:82:04:23:de:63:34:2e:
                    81:b9:7f:7f:0f:62:92:b7:a7:cc:c2:ed:61:9b:77:
                    2f:11:62:33:57:42:6f:c7:5f:d6:9c:b8:4d:85:53:
                    aa:19:3e:d2:85:af:b6:2d:bc:7b:95:23:82:58:9e:
                    17:58:af:84:cb:d0:d7:74:d7:f8:6d:f1:57:17:15:
                    2c:31:ac:6b:21:e4:e8:24:cc:f7:c5:39:ce:81:7e:
                    d6:7a:ce:2a:f9:ea:35:dc:41:0c:8f:95:54:32:ec:
                    2a:4d:9a:95:5a:51:c3:83:65:46:aa:28:bb:00:c9:
                    03:60:ff:64:dc:cb:96:bb:30:c0:05:44:e4:28:91:
                    c4:d9:cc:7a:eb:f6:3f:af:22:5e:ad:34:88:84:bd:
                    e5:9c:98:09:1f:66:be:e3:fa:0a:3c:5e:d0:37:b2:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:F0:66:7B:8F:BD:D2:6A:38:B9:BE:D0:E6:49:18:C3:AC:7E:F8
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:02:d5:29:23:40:9c:75:71:9f:51:2f:25:9c:8c:e8:9d:be:
         37:bf:14:e9:2b:64:f2:b0:59:1c:46:63:db:ad:6a:b0:12:d3:
         bf:93:de:8a:30:a7:6c:16:71:92:ae:8d:d0:09:e5:dc:ba:10:
         00:a0:48:da:c2:cf:61:77:29:72:1c:91:a1:97:f1:6e:a6:29:
         1e:7a:21:61:f8:0e:61:af:fa:29:85:3c:71:2a:64:d5:0a:12:
         b4:1a:e6:af:93:53:85:e3:e7:83:99:04:bb:44:9d:09:64:9e:
         85:5a:95:18:6b:b3:2d:c5:b3:6a:25:e6:68:7d:c7:2a:13:3c:
         42:98:db:7d:d7:dd:f1:5d:38:64:c8:2f:f9:39:1f:55:7d:0a:
         b1:db:16:fd:8b:3a:bf:6c:5d:0e:f1:ca:ee:1b:08:74:a7:6f:
         74:bd:79:a8:9f:29:c2:a9:44:22:ff:b4:22:66:a7:d9:53:4f:
         54:c2:f5:31:27:1b:81:56:99:63:48:8b:ae:37:57:1e:d8:ab:
         b0:c9:96:65:ce:e5:55:aa:bc:f5:51:cc:17:89:36:17:4d:4b:
         f5:f3:50:93:e1:71:25:19:75:dd:4c:3b:2e:d8:cf:12:99:cc:
         7b:87:c0:9e:ff:8b:a5:ac:99:c8:3c:4d:cf:84:41:dc:00:aa:
         0d:80:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----