Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File:                     fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier:          AWPGmh/tODjoNprDRQWx3b/RdPHyMmc3JPySw3LlUz0=
Subject key identifier:   88:AA:6A:FD:89:F3:03:F4:F5:EF:93:EA:06:FA:EC:4A:81:B7:D1:55
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer:       /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial:       01962E61BCB0D35B6DF1F33193D53598C0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number:          0805
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
                          2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: s+FCPNfP85q2/huItDRlmNrugYk+wA16X0HBXAODUcY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:b0:d3:5b:6d:f1:f3:31:93:d5:35:98:c0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=88aa6afd89f303f4f5ef93ea06faec4a81b7d155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:2a:04:1d:51:78:75:73:d0:67:d4:54:ef:
                    ce:9f:be:3a:47:e0:a9:90:85:b9:89:85:40:9a:69:
                    74:9f:2f:ac:9d:61:59:fc:63:58:87:4c:ac:64:a4:
                    64:c4:6c:69:8e:cb:c2:17:3d:ee:cf:82:33:ea:0c:
                    19:fb:2a:b0:d8:f0:6b:36:fc:b7:16:17:50:95:4f:
                    a2:19:48:09:e4:d7:bd:ed:7f:ee:4c:89:73:b3:a2:
                    62:40:9c:1e:4f:73:79:71:ee:de:e0:66:41:85:d5:
                    f0:05:ce:62:34:11:63:98:36:9c:ad:49:80:e6:d1:
                    c1:70:99:df:da:8e:d4:a3:fc:cb:a8:8e:d8:ae:16:
                    99:4a:a9:18:e4:d8:01:86:a3:5e:f5:c8:5f:6f:c5:
                    c1:ee:16:54:47:d8:08:a9:b9:76:92:b0:22:ab:ef:
                    d0:58:a2:f7:e2:cc:78:b6:9a:95:b5:0a:67:ab:f9:
                    2e:c2:b2:18:4c:a2:ea:50:e9:dd:15:ee:4d:77:3e:
                    47:8d:ed:d0:9c:8e:38:39:ad:c0:d4:17:dc:84:99:
                    4a:21:a3:d0:a2:b1:e8:07:6d:02:7c:82:a2:4f:0c:
                    dd:3d:57:79:bf:ec:54:86:7d:aa:37:78:48:21:82:
                    38:a7:24:a8:6e:a9:44:bd:b9:9d:79:61:77:ca:7a:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AA:6A:FD:89:F3:03:F4:F5:EF:93:EA:06:FA:EC:4A:81:B7:D1:55
            X509v3 Authority Key Identifier:
                keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:e2:3f:39:24:dc:5c:8a:cd:61:90:2f:be:79:03:89:c5:
         e1:f0:7c:ea:6e:80:93:3e:48:6e:5a:a8:1c:aa:9e:13:14:8d:
         bd:d2:7e:27:8e:d2:91:44:ef:de:bd:63:f1:bf:4f:a8:42:4d:
         f6:d7:1c:44:05:f4:a0:f2:66:14:b2:b5:d2:98:e3:86:8a:8f:
         f9:96:66:f3:d8:c5:af:2c:47:2e:32:58:d3:b8:e8:2c:b4:98:
         8c:0e:96:d5:56:5d:f5:2f:b6:3f:d9:49:ef:57:8c:24:16:7f:
         53:a6:55:87:01:d2:8c:b8:6a:4f:93:2b:12:16:e2:66:ac:a3:
         f5:af:b4:83:82:f0:4b:b5:b2:1a:7f:26:26:c3:62:36:fe:43:
         cb:82:0a:4f:c6:4f:32:d3:06:d5:5b:e7:3d:a1:1a:ad:a0:82:
         30:e5:a4:80:34:4e:54:89:47:19:6c:1a:2e:a9:da:fd:b5:97:
         43:3f:5e:d7:3f:97:4e:39:ac:2f:2f:08:3b:ce:e0:39:5e:83:
         3c:fb:e8:f8:d0:ad:a5:1a:f4:ee:8c:59:52:f2:3e:51:08:1d:
         75:b5:17:e4:41:11:63:cf:0b:1e:94:16:31:ac:bb:4d:ba:bb:
         83:ec:27:79:c5:37:26:11:89:53:3c:cc:cb:ad:6a:4b:02:f7:
         f4:82:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----