Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File:                     _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier:          7TH2fi9XJ+E7gpQ6+P3fwgCewJ1yB4UlzuuD7ED0mfM=
Subject key identifier:   A4:E7:F5:4E:EA:34:17:2E:DD:A4:69:72:80:95:E0:AD:23:57:09:8A
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer:       /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial:       01962E61CB12E33C867BCD4B6ADD7D6EFA46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number:          106B
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
                          2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: 1WYpXgdoSCRSJmaZj/UfYHfQdY6UD7JmULOZg5e5PyI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:12:e3:3c:86:7b:cd:4b:6a:dd:7d:6e:fa:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=a4e7f54eea34172edda469728095e0ad2357098a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:1f:07:3f:ae:a2:33:ac:88:c8:85:9c:d8:
                    54:b0:e9:1c:40:e5:e8:85:60:26:39:f8:df:e5:12:
                    29:f0:45:79:10:c4:20:38:bd:e2:79:fa:cb:18:85:
                    cc:94:52:3a:a1:66:c4:66:f4:4f:36:2c:73:fd:2e:
                    6c:87:b1:30:b2:38:6f:3e:67:16:69:c6:ae:70:96:
                    ae:c0:cf:e8:4d:48:5a:93:92:83:f1:31:95:01:ba:
                    0c:6a:e7:1f:c9:b1:da:2f:46:86:80:03:10:40:79:
                    60:2f:4b:b3:3e:53:e1:a3:aa:c3:1f:2b:4c:5b:89:
                    00:63:6b:fe:1b:fc:d8:8e:71:17:7a:80:2c:63:5a:
                    d2:94:7f:58:75:f5:27:e0:47:a3:4a:19:87:cc:99:
                    59:5a:9c:87:ce:c2:04:9b:e3:4c:7b:4d:1e:1f:ae:
                    44:54:1f:6e:7b:07:52:fa:45:e3:ee:34:6e:5a:2e:
                    e4:34:5c:3e:c0:f0:ce:8f:d8:e9:e6:f0:e8:6d:36:
                    ab:22:db:56:bd:5e:79:ae:26:75:2e:f1:0b:7d:78:
                    e4:f6:f1:6c:19:71:44:a4:34:dc:3b:c4:51:e5:7c:
                    43:cb:d4:d0:63:66:4d:45:42:b7:e2:b4:6f:1b:ce:
                    ac:48:5d:04:73:45:a5:ac:32:c3:d8:aa:83:e3:3b:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E7:F5:4E:EA:34:17:2E:DD:A4:69:72:80:95:E0:AD:23:57:09:8A
            X509v3 Authority Key Identifier:
                keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:51:2d:ac:93:94:5a:6b:cc:98:e5:b2:9b:33:8b:06:a7:14:
         3f:e0:50:dd:45:87:89:b8:85:99:1b:0c:b0:19:90:63:94:9c:
         28:4f:e4:5e:f5:33:20:8b:f2:94:15:d2:3f:67:0d:34:3c:a6:
         e1:df:14:e9:18:46:8d:f5:74:3b:73:c9:57:42:bc:68:02:19:
         6d:50:00:19:61:ab:18:8f:16:f6:7a:f3:ae:12:e8:8d:7a:77:
         11:ac:52:f7:c3:93:c3:2d:b2:68:78:e7:f0:5b:97:06:d4:24:
         c3:f7:3e:89:36:4c:25:fd:0b:d9:23:83:7e:a4:cd:d6:69:fc:
         40:fe:fc:c4:f1:41:1e:ce:00:ee:64:3f:cf:74:ae:7a:fe:9d:
         b2:2a:27:ed:e5:3e:42:16:84:bb:93:4b:22:e8:20:19:8e:ed:
         4c:b2:c2:99:e8:41:fb:fd:a5:26:b1:7a:00:e8:ae:82:43:86:
         f3:29:86:4b:47:19:3d:76:96:93:19:de:15:f4:36:1c:3c:39:
         9d:84:1a:f3:3c:91:a0:09:32:31:fa:f1:48:09:ef:b0:94:d7:
         8f:03:03:50:7b:2c:42:21:a5:10:4a:20:60:7e:60:ef:ff:75:
         3a:e4:86:bb:71:06:d2:d0:e2:c7:fd:c7:ab:4f:83:24:81:60:
         b1:08:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----