Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File:                     fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier:          zT2SXx7ZM1XHr7eDCYRA4TkAY4tD23knCm2IGe8qdDw=
Subject key identifier:   C0:2D:12:46:A1:AA:E1:1F:23:21:C7:48:76:69:8A:8E:23:7A:4C:0A
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer:       /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial:       01962F3DD2261DC05723F9DB4FE0CB596CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number:          0333
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=)
                          2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: qkOSZLssKMu8syc0Bx8R/m6qAkt6P95bvAEHdJcUpgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:26:1d:c0:57:23:f9:db:4f:e0:cb:59:6c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=c02d1246a1aae11f2321c74876698a8e237a4c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:85:8d:76:9b:48:9e:a7:ff:54:e2:a6:23:
                    c3:41:36:4f:ae:3b:4e:33:92:3a:a4:d5:05:36:ca:
                    8d:a2:12:d7:28:c8:4b:f4:ac:00:b7:fe:1a:b3:d2:
                    91:dd:87:7a:fe:e5:a8:e5:76:54:d5:91:6c:f6:a1:
                    33:a9:a4:5a:36:d1:44:4f:0d:e6:2b:32:0d:b8:7c:
                    c8:94:cf:71:9b:ae:cb:c5:a1:a9:f4:b4:10:96:e8:
                    bb:40:ee:3d:24:cc:5e:84:3a:d8:c0:08:02:dc:b3:
                    0d:4a:96:e1:80:93:95:06:8d:9e:55:a9:1e:44:a2:
                    09:b3:f8:4a:33:7c:27:5c:59:94:53:51:a6:51:24:
                    2d:b6:6e:7f:e5:f7:45:87:5b:39:cc:87:28:d6:7f:
                    fe:eb:62:36:86:27:f4:a6:f9:c7:63:56:b6:e5:af:
                    67:ac:b6:f6:4d:b7:26:93:ec:60:61:d0:bf:5b:23:
                    57:ad:51:07:55:b4:f4:8c:e7:ab:fd:4d:0a:6f:62:
                    b6:4f:4b:fc:3c:ff:b3:33:51:f4:59:19:2f:77:08:
                    a9:37:0f:83:e0:ce:b8:5b:9f:b8:3d:b0:24:73:fb:
                    0a:70:a1:4f:cc:35:4b:d3:b9:b2:87:dc:95:83:76:
                    f7:2e:e6:f7:1d:ce:3c:d4:cb:dc:93:0e:3f:7e:f6:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2D:12:46:A1:AA:E1:1F:23:21:C7:48:76:69:8A:8E:23:7A:4C:0A
            X509v3 Authority Key Identifier:
                keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1a:f6:e4:68:3b:05:53:49:11:36:e3:12:7c:a5:43:04:1f:
         8f:aa:46:ca:7a:b1:f1:91:b9:0a:09:03:44:c0:e4:83:f2:31:
         08:b0:ac:05:44:ee:0c:a0:b1:c1:af:53:5a:6a:47:fd:7a:46:
         71:39:e5:b4:ee:d8:39:5d:7d:07:df:71:5b:6e:ce:64:5f:34:
         e3:1f:ee:3c:f5:a1:a2:b2:49:55:c5:68:71:9e:58:ab:94:dc:
         f9:85:3a:1f:1d:dc:2e:1c:b7:c6:55:2a:be:41:cf:3a:a7:08:
         0d:08:d4:af:11:a6:fd:f9:0d:c3:06:3d:f8:e5:e9:06:6a:16:
         53:ac:15:23:28:1a:92:dd:80:e4:30:1d:a3:2e:d7:4a:fe:10:
         61:8d:af:f7:f4:74:9c:7b:84:1d:e5:60:eb:e1:17:b1:bb:bb:
         ca:4a:03:a7:cf:35:66:bd:2b:d0:87:b0:e4:84:55:b8:78:22:
         e1:a1:f5:26:4a:7f:3f:19:6a:f6:8f:1c:92:cd:47:fb:2e:83:
         60:6f:d6:12:c7:a6:3c:10:be:8e:b4:8f:a9:66:3d:17:2c:64:
         02:79:7b:f3:f1:e4:da:72:28:dd:f6:d8:bf:b7:80:7b:1f:ac:
         e0:a5:c2:24:f2:ac:04:6f:e5:be:2b:6a:16:23:59:4a:ef:74:
         d7:75:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----