Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File:                     _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier:          N4RJbayWzT4se07mT46muuQFSGKgImuNRdpEityqYqQ=
Subject key identifier:   3E:C7:E9:9F:28:FA:55:46:69:E7:53:3D:8A:CC:C2:6F:C0:C4:EA:1E
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer:       /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial:       01962E2AEBB0DFE40753C5F3C17A156FD077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number:          04C7
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: Lx69Jr7Yi0iwfd2X0v8DW8SU0DbKFXiQCzam9uAllFA=)
                          2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:eb:b0:df:e4:07:53:c5:f3:c1:7a:15:6f:d0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=3ec7e99f28fa554669e7533d8accc26fc0c4ea1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:a1:c9:9a:de:37:99:ce:d2:59:17:41:93:
                    84:6e:b7:e3:45:fa:bf:2e:1d:fa:5e:b9:08:a0:3a:
                    b6:85:06:23:56:1e:21:82:75:4c:48:8d:37:d5:b3:
                    ef:96:77:0e:3f:d8:91:95:ed:3b:65:8a:41:2c:60:
                    51:15:e7:c8:68:52:80:57:f0:ee:36:65:27:a8:ab:
                    01:50:db:a8:1c:cc:99:4d:78:fe:b6:13:a3:ec:4c:
                    61:40:be:45:ec:5a:33:03:17:13:dc:be:6e:a5:b5:
                    6e:10:df:07:38:6d:32:95:e5:7f:af:f7:cc:70:e3:
                    54:be:28:a2:ec:57:2e:b5:e3:b5:6d:97:69:73:7d:
                    49:75:4a:ec:82:52:39:1e:26:e6:45:97:e4:3d:04:
                    70:79:2e:a2:3e:09:2b:4b:ff:ea:50:4a:de:8b:fe:
                    b7:31:70:ac:02:f7:b5:9d:c7:5e:da:b0:4c:1a:cb:
                    13:24:2c:a8:e0:a6:b9:a2:8f:41:d4:5a:8a:91:23:
                    7f:a7:bb:49:f8:07:ec:ad:bb:0c:fd:f0:dc:32:64:
                    e0:c5:0b:08:63:7f:ff:d2:f2:e4:12:22:c5:5a:28:
                    e2:e3:34:14:b8:b3:ac:99:12:70:26:a5:cf:da:ab:
                    5f:10:60:98:d3:dc:c0:fb:7b:3a:f4:5c:e4:02:cc:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:E9:9F:28:FA:55:46:69:E7:53:3D:8A:CC:C2:6F:C0:C4:EA:1E
            X509v3 Authority Key Identifier:
                keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:a2:71:3d:e9:48:a2:40:fd:05:d1:94:e8:a0:58:67:4e:
         96:54:2a:ca:9d:2f:d9:3d:de:39:a6:67:96:34:15:90:45:48:
         74:28:5d:bd:dc:e6:5a:77:d3:d3:e5:91:04:d1:23:ca:bd:b4:
         4e:bc:e1:8f:69:43:b4:bb:53:5f:a4:e3:33:da:80:38:b8:d2:
         8d:d7:ee:fa:c0:4a:a8:51:94:4d:21:fd:e4:c5:10:2e:5e:cf:
         4f:41:57:10:fe:74:1b:1f:b5:84:a4:f1:e4:29:62:fb:96:0e:
         dd:b1:14:4e:ef:7e:1a:68:ad:95:19:70:ba:0b:b6:0d:e1:6f:
         ff:31:32:c3:74:8d:fa:b8:fa:93:88:b1:91:08:b6:99:d0:61:
         79:68:c6:6a:29:88:a0:09:7b:2f:55:33:ca:b6:20:05:9e:01:
         dc:5b:1a:68:d2:07:83:19:fd:00:04:af:8a:d9:c1:9d:59:27:
         d7:c2:0c:50:3d:7f:c4:9d:b8:98:bd:83:bb:8b:81:51:a5:90:
         19:8e:93:5b:c7:6c:1d:f1:2c:13:de:b9:ac:c8:2e:b7:6f:34:
         4f:ca:df:2d:be:5f:a5:ea:c9:b4:bd:2c:79:c3:d6:1a:38:f9:
         d7:3a:f3:12:be:df:19:c2:13:d8:1e:c3:8a:bd:da:66:15:99:
         a6:ec:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----