Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File:                     _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier:          GUHEdP7RSwMMwdNgDy4UIexAkX5u4cVEFQkGvwBSJgM=
Subject key identifier:   FC:40:B2:8C:FA:A7:8A:6A:AA:85:7F:50:D8:6E:83:A1:E8:C8:97:0A
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer:       /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial:       01962E61A0C2B9CAFBDC3DE84412331541E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
                          2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
                          3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
                          4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
                          5: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: uvhz/+wSltOSql0QUViITxdamOgN+4M2Ofb3gkTpc9Q=)
                          6: u_WvPHOyTZv1yIumAHFttyTLPq0.roa (hash: orApbyBIxfQnRa+Eb9kNcqjSQcTLlYJsX3y/E+LLNDM=)
                          7: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
                          8: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:c2:b9:ca:fb:dc:3d:e8:44:12:33:15:41:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=fc40b28cfaa78a6aaa857f50d86e83a1e8c8970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:aa:9c:6f:c7:2e:fb:cf:31:43:3e:fa:e3:
                    89:08:18:9b:b2:b6:90:8b:dc:81:2c:cd:f7:b9:7c:
                    4a:9a:2c:78:ec:a7:98:b0:e3:a5:33:1f:bd:e9:58:
                    19:a4:92:f3:74:7a:ff:c9:96:a4:a0:9e:9f:10:17:
                    77:42:07:7f:9c:7b:b0:3c:ef:30:e6:36:d7:2e:96:
                    a0:cd:8b:a8:60:5b:94:87:d9:ef:33:7f:68:2d:f4:
                    b7:c0:bd:13:e5:be:02:0c:66:be:b4:88:84:fc:bb:
                    d6:0b:9d:d0:45:25:a8:f3:b2:d4:f3:ba:62:f2:76:
                    3f:45:20:3e:af:65:49:24:52:ec:35:9d:94:3a:97:
                    bf:cc:25:1f:90:51:cb:3b:97:46:45:89:c1:2a:2b:
                    24:08:fb:ef:5a:3d:d6:30:0d:fe:27:4f:3b:0b:b0:
                    27:be:30:e0:75:13:97:e9:95:fe:f5:78:eb:02:eb:
                    d0:ac:7e:82:0e:bf:1b:fc:9a:d7:92:93:86:f0:1a:
                    ce:b6:2c:65:ef:dd:60:6a:e7:7c:85:cb:cf:c1:cd:
                    ff:7c:ad:7a:88:e5:67:a1:d2:76:36:55:9e:cd:a2:
                    b1:35:71:9b:5c:71:d2:6f:fc:4d:18:55:93:6f:49:
                    0c:43:bb:89:ae:d5:00:d4:41:55:1c:e5:f1:3c:b9:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:B2:8C:FA:A7:8A:6A:AA:85:7F:50:D8:6E:83:A1:E8:C8:97:0A
            X509v3 Authority Key Identifier:
                keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:21:d5:09:6a:e8:2e:74:7f:32:aa:c7:cf:91:5e:6d:4c:
         ee:ef:8d:90:8e:8d:ed:ed:a7:4f:41:17:07:69:9a:ed:76:89:
         80:93:76:4e:ad:98:29:bc:b3:e7:52:09:ab:be:39:60:5b:aa:
         64:28:de:8a:ed:af:2b:21:d1:3c:90:4f:a8:81:3e:fe:23:2b:
         c5:23:5e:44:20:cd:e2:95:f5:5b:0c:e9:c1:80:79:4c:5d:6c:
         48:c6:3f:18:b2:16:24:75:c0:b0:26:34:b5:bd:b8:10:8a:4b:
         4e:15:a2:91:3c:4c:65:82:f8:8d:12:5d:04:fe:bf:28:fa:2f:
         b5:d4:0b:f3:f6:3b:27:a6:cb:5a:96:40:16:01:57:37:d4:87:
         3f:88:3a:36:d4:6f:79:09:e1:f3:36:60:d4:c0:a8:84:80:a7:
         5d:16:98:eb:84:4c:5b:13:95:93:a2:ad:d9:ab:f5:2e:59:3b:
         0c:1d:f1:9c:37:a0:7e:e6:7a:d6:c5:32:4d:5c:f9:11:57:09:
         32:9c:91:d4:bb:2c:1f:84:ea:86:2d:48:66:20:c3:bd:99:fe:
         68:0a:7e:ee:ae:4f:7f:83:f2:c0:34:89:b6:9c:fe:8f:b6:25:
         63:8a:db:52:76:f4:9d:21:11:ee:c4:04:17:a0:6a:bb:fa:1f:
         c4:8b:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----