Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File:                     Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier:          GcNQ9zuQPp2Vho3QZO1c0DRo2hLSfGGlg6ua6T+GL8c=
Subject key identifier:   1E:5D:E7:72:BE:BF:08:F5:FB:CC:EE:C3:6B:08:78:E4:56:B3:61:C4
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer:       /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial:       01962E6179F934A66E419FE3B9933ED00768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: XJemkhxeyP7ahZJt1JOamnyQvygecWXMkE7WQG56KvI=)
                          2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
                          3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:79:f9:34:a6:6e:41:9f:e3:b9:93:3e:d0:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=1e5de772bebf08f5fbcceec36b0878e456b361c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:af:da:c7:2f:81:44:3e:d2:63:b5:3c:39:
                    40:4d:1e:c9:ac:8b:28:ba:d9:31:a6:74:4b:1a:44:
                    32:40:54:e4:57:27:b3:05:f4:00:bb:d3:bc:35:67:
                    10:a6:f9:21:c6:96:fc:04:64:fd:79:c8:ca:45:72:
                    95:aa:2f:92:71:b3:ea:43:f9:c4:ed:4a:00:a2:19:
                    44:d0:48:bb:45:9c:eb:db:bc:ca:ff:ad:5b:8f:b3:
                    db:ec:df:49:7c:e6:7a:13:07:6d:2d:0a:f8:35:12:
                    07:34:a9:c8:fb:63:81:1c:32:28:bb:ac:4a:75:68:
                    6a:23:f6:af:c4:b4:f8:96:df:bf:b3:a1:36:ec:2b:
                    e9:ef:53:2f:af:88:0f:f7:ea:9a:38:56:0f:3a:7c:
                    59:37:38:48:30:70:fd:e1:11:0b:c0:2e:d5:ef:1d:
                    cd:80:81:c8:a8:46:f9:74:3a:8e:35:cc:84:31:21:
                    29:79:15:e1:78:eb:41:78:95:6d:23:ad:2d:1b:9e:
                    0b:e5:aa:fc:c9:b3:bd:8f:2a:74:59:e8:ac:f4:e7:
                    f5:bb:ce:e4:90:0a:2c:61:b7:01:f9:bb:ff:9b:d2:
                    cc:b3:db:82:29:67:12:28:52:a4:1b:d9:77:5d:73:
                    a1:35:4a:6c:21:01:8d:94:4f:aa:29:13:9b:6a:76:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5D:E7:72:BE:BF:08:F5:FB:CC:EE:C3:6B:08:78:E4:56:B3:61:C4
            X509v3 Authority Key Identifier:
                keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:76:37:5c:00:7d:fa:57:b8:6e:5a:2e:2e:8a:67:ef:29:85:
         b6:a7:29:78:a3:61:2c:4f:ab:4b:22:f8:b3:71:1e:2a:68:73:
         59:0e:4a:7d:d0:09:86:68:c7:19:87:ac:b1:8d:6d:8c:81:a4:
         fa:10:0d:93:c5:66:af:fe:98:60:92:66:c9:95:c4:81:f1:20:
         cc:8e:f6:8c:50:63:09:7f:e7:83:78:84:b9:6f:1b:d6:50:68:
         d3:8e:c8:f2:4f:23:83:31:0d:75:ec:b1:2f:43:53:d6:63:d3:
         54:c8:a6:a5:8d:b7:81:99:9e:5f:52:ee:17:98:7e:27:59:8e:
         6f:ba:3c:03:f0:0d:b4:04:e9:cd:83:38:52:f3:88:c2:c4:81:
         17:e4:32:f2:e0:8e:c3:4a:fd:8a:ea:4f:d8:df:38:d9:6c:56:
         6e:1c:67:19:a2:aa:d4:d7:aa:5d:61:dd:25:bf:bd:1d:13:ff:
         ca:56:f8:af:6a:8f:a7:3c:52:73:c4:82:4b:e7:a6:16:c8:ac:
         78:7a:a8:5c:89:be:9f:65:ff:9b:a0:ce:f3:08:b1:6b:9e:5f:
         e8:df:22:ab:69:cc:80:e7:24:31:6f:5c:0f:6e:dd:05:69:b5:
         1a:6c:be:bd:24:89:43:b8:2b:c9:a6:36:9a:80:4e:63:55:59:
         68:a0:a1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----