Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          zzlS03oE5TXEb6gL/h0KjinX0PcYGHQaKRjVJ/+xQvY=
Subject key identifier:   B9:23:52:C7:E3:FE:23:BB:64:83:23:5E:45:6E:29:C6:21:A2:7F:8B
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       01962E617CFFB2E35EDE53D794739369BD4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          150A
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
                          2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
                          3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: zOjWZAsVKTZHmmuVrCyIRELLI8YS1yr28oE4HO7pwak=)
                          4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
                          5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
                          6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
                          7: VMoqlOK-MJqp996eyPBNUMTrX6A.roa (hash: 8RHtQIgLQ/EvEXhkyLFjYmtdChDMLdlv9Mb6lWVfKUw=)
                          8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7c:ff:b2:e3:5e:de:53:d7:94:73:93:69:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=b92352c7e3fe23bb6483235e456e29c621a27f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:bd:d9:cd:7f:d7:9d:71:e9:3a:1a:82:6f:
                    8b:0f:5a:ec:eb:6c:ff:f6:f1:ea:3f:e4:ac:e0:df:
                    b1:dd:78:7a:09:33:b3:b4:e3:28:30:a4:4b:8b:cc:
                    b0:6e:54:a3:91:16:38:5a:89:b9:25:49:98:69:e2:
                    07:54:40:62:42:e8:d3:36:38:da:ca:2d:32:c8:bb:
                    ee:42:80:a1:5a:94:e5:18:0a:dd:fc:fc:7e:6b:c9:
                    38:d6:05:50:94:d7:97:42:b0:8c:67:3c:48:3a:3f:
                    15:6d:cc:3a:d0:5b:86:77:d6:e7:5f:4c:e3:11:84:
                    ea:8d:38:54:f3:82:df:1c:cb:c7:8c:9a:bf:bf:29:
                    c9:e9:57:45:9e:81:d1:d2:4a:9e:4f:d6:5d:45:b1:
                    d2:bd:74:72:be:bd:bf:d0:a6:f4:aa:47:a8:53:d5:
                    a4:22:48:d4:76:a2:77:f6:0a:19:b9:93:ee:95:38:
                    6d:7c:61:7b:57:06:89:16:f1:ca:99:da:4c:f3:52:
                    02:4b:7e:d1:1f:19:65:d5:5b:4d:dd:fc:46:4b:28:
                    e1:8f:a5:5a:74:06:4d:37:be:cc:4f:6b:0d:6c:5d:
                    48:74:c1:a6:52:36:d2:65:f5:0a:6e:ee:19:99:1e:
                    7a:d2:92:58:be:12:1b:53:7f:71:04:fa:b5:e1:db:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:23:52:C7:E3:FE:23:BB:64:83:23:5E:45:6E:29:C6:21:A2:7F:8B
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:0c:ec:52:3a:41:18:22:18:91:5d:05:bf:4b:9e:e7:c0:
         73:ed:19:79:b4:a7:c7:1d:c7:6a:d6:d6:ed:50:41:15:b7:27:
         a6:58:df:b7:68:1a:ab:25:92:68:83:61:1e:61:59:1d:be:30:
         28:1d:0c:87:27:d3:e6:ac:00:00:af:89:e9:2a:6c:be:d9:c2:
         0d:a5:c4:f1:51:2b:5a:99:e1:66:8d:de:60:57:e6:e0:34:b7:
         f0:7e:43:7e:93:98:6d:85:24:86:fe:f4:fb:29:d6:74:8f:9d:
         5c:34:de:f8:5a:5c:a3:bc:bb:e8:d6:95:cf:6e:8e:f4:04:4d:
         b0:97:a3:a7:d7:51:40:3e:16:36:17:45:2b:2b:13:c3:77:86:
         b6:ac:52:0c:5b:43:e7:aa:eb:e2:79:33:0d:8e:88:56:d6:17:
         5b:e9:b1:9e:40:21:f8:76:69:c5:46:58:25:3c:fa:87:70:f4:
         21:fd:e7:ee:7f:65:c1:6e:9f:70:cc:1d:b7:64:3d:bf:ab:ac:
         53:2b:13:78:81:1c:5f:42:f6:7f:a0:a8:dd:2d:41:08:5a:1e:
         7a:3a:3f:85:46:6c:be:8c:2e:05:0d:d7:5c:70:25:5f:0f:d4:
         8e:50:f6:08:b5:22:92:f4:a9:f0:d5:d3:b9:f4:b0:4e:3c:39:
         0f:1b:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----