Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          6B2a3yY/nwY/hAwwAyzJv8iY9/g7YgNMLjwQONHOO5w=
Subject key identifier:   77:03:15:CB:21:7B:DE:24:11:25:C4:7B:44:3A:52:A1:D2:C4:6E:9E
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       01962DF3F1B30D9CA9B0EFBA2D534466785F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: El3REFyoJUI4FZFPbk7oIZV+r/qYexwCm/cxoV3xmV0=)
                          2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
                          3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
                          4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:b3:0d:9c:a9:b0:ef:ba:2d:53:44:66:78:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=770315cb217bde241125c47b443a52a1d2c46e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:61:2a:75:e4:5b:88:da:45:3f:43:2a:97:
                    89:d7:67:cf:3a:70:3d:1e:05:c7:7c:14:3b:ef:99:
                    e4:98:42:1a:d7:b9:1b:d9:90:53:a8:c1:48:0f:31:
                    8d:03:90:b4:61:d6:9d:cc:db:67:6a:b8:24:63:af:
                    c1:9a:da:c4:ce:09:fd:07:7b:4c:aa:cb:d4:e8:89:
                    84:87:33:d3:f1:c6:85:30:f9:59:eb:5f:25:9a:d1:
                    c1:78:e8:d1:33:40:4a:83:02:ba:2d:dc:20:2d:35:
                    22:06:51:7e:d0:43:9f:7b:3a:30:c8:58:a2:dc:56:
                    2f:fe:6e:fd:73:63:7c:80:11:03:fd:3b:de:cb:84:
                    fa:f8:e0:f8:50:20:73:68:a3:88:02:eb:ef:61:5b:
                    87:a2:44:a0:0e:6c:2b:44:f0:e1:1e:db:92:bc:b4:
                    e8:33:75:9d:ac:58:80:e4:3c:d5:db:3e:37:7f:e0:
                    11:0d:ee:0e:ee:6a:47:6f:6e:5d:c7:ea:06:ec:16:
                    4a:39:db:0a:7f:6d:85:f0:2d:b2:e3:09:ce:3f:12:
                    e3:10:af:06:a9:20:5d:97:af:e4:a1:df:17:34:3f:
                    1c:42:7b:f0:c4:11:dc:8d:9f:8d:e8:b4:be:35:bd:
                    c7:1e:38:d4:d3:d5:c9:f1:95:a6:e4:7f:85:ca:93:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:15:CB:21:7B:DE:24:11:25:C4:7B:44:3A:52:A1:D2:C4:6E:9E
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:02:d1:c6:ab:ac:ed:57:13:2a:92:cd:88:76:40:6f:ed:f1:
         6e:81:f2:49:ff:67:44:3d:d3:41:1a:0d:cc:39:c8:13:d7:f0:
         46:4d:b9:c9:07:65:88:96:36:c8:54:85:72:6c:38:82:81:17:
         8b:33:86:5e:ec:eb:4d:86:c9:2f:b2:5e:2f:a8:34:47:98:57:
         4e:7b:6b:46:b2:40:ce:a1:76:16:e2:1c:6b:bf:67:c5:1a:d8:
         7a:6c:4a:37:a1:cf:ab:18:df:35:d5:14:2c:f3:8c:b3:31:1d:
         6e:3c:a3:0b:e7:51:41:30:16:c6:aa:b3:fd:be:76:d3:0a:7f:
         69:cc:54:cc:e9:d6:a7:b1:91:da:59:be:ac:7f:13:f8:46:72:
         4e:9c:61:a3:ca:f4:45:a2:59:94:be:80:2d:c2:11:5c:45:44:
         9e:48:f1:cc:fd:1e:74:5c:ac:a4:15:b4:f2:0a:70:23:c6:7f:
         41:29:07:75:8d:37:36:80:b8:85:57:85:9d:6d:b7:ac:91:02:
         c3:0c:35:69:0c:9e:ff:4f:9f:ab:b4:ab:80:b4:0d:e9:f9:62:
         41:0b:80:f8:6c:68:bd:0a:04:fb:24:95:61:54:fe:63:e0:ea:
         74:cf:eb:6d:5d:8b:80:3e:5b:2d:6b:ad:7b:89:93:b6:28:00:
         0b:ac:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----