Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File:                     _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier:          q26yn7we0T7QxPlDM+uL55Lxu+UKiAx6T4M8TCojvE4=
Subject key identifier:   92:22:25:B0:F5:8B:61:07:DA:6D:E7:8F:06:D2:50:DD:07:C3:0F:FB
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer:       /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial:       01962FAB8A97CECA55B49AE8C3E531FA56F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: NueAyWO6nUDb2NMovITAMwzJf0VuV4N2w9wZMX+hafs=)
                          2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:97:ce:ca:55:b4:9a:e8:c3:e5:31:fa:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=922225b0f58b6107da6de78f06d250dd07c30ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:2c:d7:8d:97:39:35:e8:c2:46:e4:14:26:
                    28:81:b3:7a:26:f3:e1:7d:64:08:0c:9e:f9:43:4a:
                    93:5d:81:85:e9:dc:7c:76:1f:57:f3:0e:d6:40:d8:
                    71:02:98:51:ef:28:88:2c:8e:e3:b7:1f:64:52:af:
                    f2:96:a4:2d:8b:a0:3e:c3:be:ac:a1:c2:da:2b:4f:
                    0e:df:3f:c8:02:96:66:f4:ab:be:fd:2a:44:05:19:
                    a2:de:aa:b5:be:2b:c6:33:f0:64:91:26:86:29:37:
                    8b:af:c7:dc:7e:4d:e4:e7:c5:44:4e:11:8d:58:28:
                    4d:8d:a5:61:50:27:4a:ba:b7:90:e9:a9:de:97:e7:
                    6e:23:94:6d:2a:b6:92:f6:41:e8:72:92:ad:85:17:
                    d8:88:dc:7a:4e:83:ee:73:cc:48:47:c7:86:d7:27:
                    cb:e4:74:0c:6c:eb:7a:96:57:cb:12:ac:4f:2a:44:
                    ae:22:cb:4d:29:a9:0e:a8:79:6b:78:fb:a6:ec:d8:
                    a7:52:fe:a6:99:b5:d3:ff:a6:0f:78:f2:cc:fd:d0:
                    80:fd:0d:69:fe:79:42:31:c3:cf:e5:a9:77:74:a9:
                    4d:b3:26:54:96:1b:74:2c:62:eb:a3:77:29:43:83:
                    b5:ae:2f:74:92:ad:a9:01:a1:b9:2c:0a:8c:81:2a:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:25:B0:F5:8B:61:07:DA:6D:E7:8F:06:D2:50:DD:07:C3:0F:FB
            X509v3 Authority Key Identifier:
                keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:33:94:c1:a0:7b:68:ac:44:19:4c:03:1f:18:cb:f4:e0:f9:
         6c:49:c3:3e:8a:a8:07:7b:60:79:12:ea:2d:23:4c:71:09:ca:
         b3:00:a8:21:e0:6f:de:92:a4:fb:9e:40:b7:47:b7:4c:6b:2b:
         24:3d:f0:49:d3:50:38:1d:08:28:30:d6:95:36:6d:07:fa:07:
         6d:bc:c2:12:16:e2:2f:e7:9e:24:6f:cf:60:d7:11:69:0d:6a:
         d1:a6:64:04:0d:24:95:35:78:4c:b0:26:f7:73:09:af:1a:42:
         a7:1a:0f:36:34:6f:25:19:26:a2:6d:62:7f:fb:50:78:ad:fa:
         6a:34:f0:74:cb:01:ef:fd:5d:72:ad:c5:05:cb:f6:48:b9:ef:
         54:35:e0:ba:fc:6b:0c:50:ec:61:18:c5:41:f0:a0:8b:0a:7a:
         e0:7c:a7:84:7e:cf:f3:4b:05:bf:38:6b:e0:48:e2:35:7d:bc:
         94:b3:a2:b2:a1:e8:75:fd:26:38:c6:89:4f:f1:2c:60:44:4c:
         d8:0b:da:e2:d6:fb:7c:b1:f2:f8:63:77:0d:3d:ad:d5:3d:07:
         ff:b7:61:d5:c3:a6:69:0f:c1:89:ed:52:ed:38:46:d8:5c:92:
         60:7d:9a:56:cc:7c:7f:60:29:b1:f6:c3:8f:4f:de:28:21:98:
         73:97:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----