Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File:                     fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier:          0VYK4q8hNPxxlGwnICAQ7HJqBcgJN7ugfsvpx7Y9kJA=
Subject key identifier:   3F:B1:5D:DF:B2:49:A7:9F:2F:D2:5A:3F:6B:87:71:CC:C8:43:D5:F3
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer:       /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial:       01962F748A07F4BEB41EF18E8ADBC02ECC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number:          13AE
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
                          2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: Erb131JuqQXfoJ53gpiYZ2piJYmaAQtGEl+zw1JlbYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:07:f4:be:b4:1e:f1:8e:8a:db:c0:2e:cc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=3fb15ddfb249a79f2fd25a3f6b8771ccc843d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:35:94:ee:43:bb:a1:cf:f4:0a:85:ab:8c:
                    d7:19:60:8b:55:63:a3:2c:fe:2d:48:0d:17:9c:a8:
                    01:dc:f5:24:19:58:5d:f6:1c:30:b3:19:10:54:a0:
                    74:9d:00:32:7c:88:57:b6:c6:f3:b0:4c:40:a7:4b:
                    c6:38:aa:18:5c:70:21:41:75:d6:f0:59:40:c8:8d:
                    4e:03:fd:b4:f6:ec:7a:24:02:87:21:23:30:d1:ca:
                    be:95:11:a7:b0:56:54:9b:2b:43:fd:8a:ed:6c:6b:
                    88:de:ea:22:75:fa:85:00:46:ea:9f:1b:7d:a3:ee:
                    e0:7f:82:9b:93:5a:fd:93:e9:74:60:82:a8:60:33:
                    23:53:21:44:cb:94:3a:a1:30:22:bb:3e:ad:f2:46:
                    93:68:f5:96:6f:dc:e9:27:3a:78:1d:7e:5c:4f:11:
                    31:ac:b3:7a:48:32:4c:aa:e5:fb:97:ca:8f:62:45:
                    54:87:00:f3:eb:a6:c8:ad:3a:25:47:c4:ab:8e:5e:
                    dc:66:75:3b:b3:fd:cb:af:6c:46:ac:bc:48:8b:f1:
                    d3:5b:d1:a1:ab:c7:e3:f7:6e:e3:9b:89:0f:05:c1:
                    35:a8:69:e5:a3:8b:99:87:80:95:4d:f1:c7:2e:e2:
                    45:81:c7:d3:2a:42:a9:00:05:33:e9:81:e8:db:23:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B1:5D:DF:B2:49:A7:9F:2F:D2:5A:3F:6B:87:71:CC:C8:43:D5:F3
            X509v3 Authority Key Identifier:
                keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0c:86:1d:46:62:c2:ae:e5:83:c8:a1:50:ce:80:66:b5:77:
         84:ba:e3:e0:1c:99:4d:13:9d:39:f3:f1:75:6a:a6:33:62:fb:
         1e:26:6e:49:39:66:c6:58:37:78:4e:3a:75:8b:4a:33:82:c6:
         ef:ca:e3:01:7e:98:29:54:e5:76:34:e5:92:b0:c6:d5:0e:4b:
         11:da:f0:24:ef:b3:d9:79:fe:a2:73:fd:63:98:6c:75:b7:3a:
         6c:b1:bb:34:27:62:19:38:66:ee:24:95:3a:ac:aa:05:cd:9f:
         3a:ef:ee:d4:fa:35:3e:f1:32:a1:bf:0a:4b:06:45:ca:41:39:
         c9:e3:40:34:ab:36:e2:7f:3b:3d:ea:9e:6d:6a:b8:90:8c:44:
         3f:6b:fd:27:58:e4:66:63:69:67:63:45:58:b8:89:a1:df:4e:
         76:24:6f:29:c4:f1:c6:23:4b:47:75:05:2a:ed:2b:51:d1:a3:
         bb:d0:ff:57:19:b4:09:7e:29:4d:a8:ec:12:6c:c4:da:e7:db:
         90:e0:20:0a:34:f2:0d:19:92:16:05:cf:fd:fa:95:71:c5:3e:
         39:54:1e:0e:24:18:77:58:0d:25:b7:20:58:e1:81:df:d7:dd:
         c8:e9:d3:e6:ee:72:be:c8:17:c6:09:ce:f4:4e:35:eb:82:83:
         93:5e:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----