Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
File:                     Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json)
Hash identifier:          QyHJh2cL5AzaiEyGOY0PfQLgZ4x8vHGl+amSZ1Rr53Q=
Subject key identifier:   68:76:19:FC:48:A7:44:5F:7B:C9:F5:20:A7:85:8B:EF:F9:D5:82:71
Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98
Certificate issuer:       /CN=1627b80681f5b48e126898295983e0df29971b98
Certificate serial:       01962E9946BBF8D9129D59EBF8A8E0969F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft
Manifest number:          0EE4
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: RTvIiJNT947rKIpc879oCgQmRxOOkSIeUEY11QUGwis=)
                          2: _AGKWozlzWCnt0EVUV_nIRjWGDc.roa (hash: u4jnpeyvwfIgkyOL/DVIQbqgyc9sUOLPqmAM+WUWM1s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:bb:f8:d9:12:9d:59:eb:f8:a8:e0:96:9f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627b80681f5b48e126898295983e0df29971b98
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=687619fc48a7445f7bc9f520a7858beff9d58271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:1c:0e:95:4a:85:bf:13:76:71:7b:3a:ef:
                    38:3f:20:d8:25:82:8c:50:13:d9:5c:5c:2d:33:4d:
                    03:f6:84:e3:72:02:5b:03:e0:33:79:34:b1:0c:02:
                    aa:54:08:37:c5:0b:18:d2:18:e9:6f:3f:c6:62:a9:
                    4b:05:66:53:10:17:f3:06:b9:09:3b:d5:b2:70:f0:
                    50:27:c2:8d:03:8b:52:d3:86:9a:a8:57:3e:1c:73:
                    68:30:f7:01:14:7d:86:fb:35:53:d2:d4:b5:9c:b1:
                    5b:a3:93:12:35:64:08:ef:82:59:3f:5d:96:64:81:
                    ac:51:cf:4d:f6:1f:ba:6a:fa:2e:07:3a:ea:89:83:
                    9d:36:48:3e:1a:e7:42:e4:8f:84:8c:1e:52:a2:dd:
                    f4:d8:86:89:d5:77:50:81:0e:7f:ae:27:38:6c:4a:
                    a6:05:a9:ed:0b:4e:3f:ef:5c:53:ba:14:a6:11:66:
                    16:94:d9:46:84:82:de:4a:f2:66:34:2b:d8:ec:0a:
                    ef:a4:27:29:83:b3:c5:37:e0:cb:4b:e4:92:ab:e6:
                    f6:f6:f3:46:19:d6:fd:37:71:b5:0f:39:27:d4:01:
                    8d:57:78:fe:08:1c:3b:7a:ac:7e:46:d4:09:9a:f9:
                    40:db:39:22:16:a0:8f:fc:77:ea:08:5c:74:87:01:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:76:19:FC:48:A7:44:5F:7B:C9:F5:20:A7:85:8B:EF:F9:D5:82:71
            X509v3 Authority Key Identifier:
                keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e5:df:c8:8e:7b:4a:1d:0c:4d:91:45:de:7e:72:f6:f8:07:
         8e:05:a9:c3:1b:4f:be:78:6d:3d:f7:17:96:28:7d:c8:e0:b3:
         ea:d4:64:b9:b4:42:df:f3:48:89:d8:cd:59:00:18:9f:90:66:
         8a:52:45:ea:c8:de:93:a7:03:e3:5a:e0:af:88:88:58:7d:f5:
         98:83:be:e2:ca:4e:81:ab:c0:bb:72:0e:ca:74:6c:c5:e4:dc:
         a0:17:64:1f:38:c7:4e:99:65:95:dd:57:71:9d:23:06:52:97:
         04:72:3b:86:05:e2:10:7a:9e:62:f4:74:4d:c0:27:f8:ca:3a:
         4a:5d:92:3c:64:5a:a9:5f:c2:d3:7b:19:74:ad:54:27:dd:ba:
         d8:03:e6:94:ba:e5:4b:84:54:36:6d:33:1d:30:0e:9b:b2:28:
         c5:94:1b:dd:49:0a:1a:b7:8d:07:25:3e:9f:e0:56:e8:9e:cc:
         7c:17:f9:db:80:f8:87:59:b9:04:f3:0e:71:44:c8:15:f2:3b:
         cb:eb:b1:49:93:cd:22:a7:06:55:c0:39:35:ac:e3:0b:50:17:
         b7:0f:bb:d5:46:31:83:20:d5:ff:48:24:cc:15:4d:d0:af:18:
         52:43:3b:18:b8:d4:7f:cc:6d:cc:79:26:33:89:2f:cc:74:75:
         55:4a:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----