Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File:                     FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier:          EPkA1DI4cVYz5rinklJM8/lLP37L/y/VUsTWbltqO+E=
Subject key identifier:   48:27:A6:F7:63:39:30:F2:9B:D0:18:72:BA:78:62:9D:D2:47:D9:0B
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer:       /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial:       01962F070A7F45A571B7ADFDC9A1125A536E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number:          0A25
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
                          2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: BwjhPv39N8xO4mvI7vi24SStzjgdfTWX19oVqIOKdRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:7f:45:a5:71:b7:ad:fd:c9:a1:12:5a:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=4827a6f7633930f29bd01872ba78629dd247d90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:86:f7:5f:ef:4a:8d:70:12:50:06:c4:39:
                    62:40:dd:34:cb:41:7b:7b:60:50:fd:4d:42:95:b3:
                    ea:c5:27:a5:5a:55:ee:03:b0:5c:dc:6d:8f:57:90:
                    51:84:34:0d:40:c8:29:1f:ab:aa:72:5d:24:29:78:
                    c9:24:1a:f0:6c:ea:42:fd:29:ad:87:fb:df:2d:be:
                    01:a8:26:a5:99:6c:37:d5:b1:80:61:ba:d7:de:32:
                    b8:2d:d8:06:1c:29:3f:6f:cd:55:f0:e4:d8:f0:50:
                    db:37:71:53:6c:a0:d0:e2:ca:af:28:84:d7:c3:02:
                    18:29:0b:2a:1d:f3:b2:4d:1f:94:38:f7:0d:5f:90:
                    e8:4a:80:ac:e5:41:af:51:d2:0a:fb:19:2d:8b:1c:
                    5f:e4:2d:39:d8:3a:bb:a3:32:ec:7c:d7:5e:71:81:
                    71:61:d6:91:10:d2:03:0b:17:99:a1:a7:82:7b:8f:
                    f5:cf:5c:89:40:bc:0b:a0:a2:3c:2e:69:3c:63:fc:
                    2e:36:30:83:8e:22:b9:25:31:44:cf:38:30:b7:d8:
                    0b:3d:d8:bc:8b:c0:d6:49:da:6f:e9:f9:e0:7c:7b:
                    c4:3e:3e:fc:5b:13:d0:f7:eb:0e:7c:de:4a:01:5f:
                    c5:b1:e0:75:a2:cb:d0:d6:2b:a5:a9:22:d9:15:2d:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:A6:F7:63:39:30:F2:9B:D0:18:72:BA:78:62:9D:D2:47:D9:0B
            X509v3 Authority Key Identifier:
                keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:80:48:5e:85:27:59:94:6e:86:cd:2d:66:00:e3:83:41:96:
         e9:3e:ca:09:62:5b:38:f2:58:54:2d:af:aa:b7:6b:e2:c9:d2:
         a3:41:bd:56:48:f6:f7:03:9d:e6:b8:ec:ee:b7:da:cb:02:1f:
         53:e0:aa:a4:09:58:64:77:5b:2e:97:8b:ce:71:4c:6d:7e:9a:
         5b:94:8d:f7:cf:1f:3b:09:10:80:b6:81:77:fb:41:95:9c:dd:
         c2:3b:e1:f8:ac:df:5f:19:18:05:06:8f:ab:b9:1b:d4:c6:c7:
         f3:e3:4c:88:38:2c:0e:94:4b:fa:5a:5d:5e:56:94:a1:64:36:
         ac:6e:e0:d9:f3:31:31:7a:b4:e7:d5:b0:05:de:f7:95:ea:a4:
         ef:61:bf:36:59:c0:85:cb:03:53:70:18:d1:89:ff:39:8d:77:
         19:5c:dc:96:82:71:93:c2:2b:c1:a9:b1:f0:47:b5:fc:29:81:
         5c:80:8f:93:93:ae:b3:44:2a:25:72:dd:3b:91:bb:1d:82:95:
         82:1b:f8:a2:45:28:48:77:4a:ef:db:96:f6:38:da:64:68:db:
         46:30:bb:85:96:ef:f3:2e:0c:1f:86:2f:e0:d4:46:e1:3f:24:
         04:d9:78:a2:15:a6:88:82:3e:e9:f5:43:22:fb:f8:f0:a3:e2:
         04:9e:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----