Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          DKltCS6FXIwlAN8tHOq0tfZk6gY2/BXB6KvtLwn3WA4=
Subject key identifier:   24:B6:8F:4D:90:43:E8:42:93:7B:0D:90:BE:B1:53:29:CA:D0:5A:42
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       01962F06892F967291C266CA646D59003A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          0E68
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: qiEV/sEVNu5hqGT7iaH8Z1yvykiZ2f7brT1O2Wop11I=)
                          2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:89:2f:96:72:91:c2:66:ca:64:6d:59:00:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=24b68f4d9043e842937b0d90beb15329cad05a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:58:6b:f4:c2:e2:41:c1:0f:97:f1:b9:57:
                    c4:ae:0c:4e:5c:f6:82:19:e7:ae:86:92:a4:08:70:
                    2e:5b:9d:d9:9a:30:91:f3:7c:cf:8f:1d:45:ba:0f:
                    60:5f:0b:57:82:9a:af:20:36:98:c2:71:da:7e:4f:
                    a8:99:bd:69:1e:53:5f:06:e8:38:d5:09:da:32:ff:
                    23:0f:5d:6b:1d:ee:bc:9c:74:80:f0:3d:48:78:cd:
                    a2:06:8e:58:6d:c3:b0:bd:1c:4a:97:54:a1:98:2b:
                    16:73:ac:cc:b2:75:d3:52:d6:c3:59:5e:5e:3e:0a:
                    a7:7a:f0:c8:94:eb:8c:6e:f7:ef:7e:2a:9e:41:14:
                    6d:bc:de:10:5e:74:3c:c0:d5:8c:f7:f8:5c:94:d5:
                    d3:13:0e:6c:8e:16:cb:f5:68:ac:79:b2:9f:bc:e1:
                    d2:ca:13:6d:7a:c4:53:7f:aa:28:78:5a:fc:7c:17:
                    ba:cc:a2:7c:81:de:96:65:4d:8c:64:c0:e3:eb:c8:
                    52:5e:14:33:7c:be:f6:e6:3d:9b:cf:bb:d7:52:bc:
                    1e:a0:a3:de:fb:3a:fa:70:ea:48:76:9c:e3:08:0f:
                    fc:a1:89:30:da:76:29:23:34:f4:c6:25:ac:f4:02:
                    45:3f:7a:54:f9:5f:75:42:61:25:e7:e2:44:d1:18:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B6:8F:4D:90:43:E8:42:93:7B:0D:90:BE:B1:53:29:CA:D0:5A:42
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:43:66:a2:fa:d7:7c:cb:91:51:e4:27:e7:d8:1f:c6:8d:16:
         a9:cd:54:39:71:9d:af:0a:58:8d:fa:fb:f6:38:9a:46:f5:18:
         be:5d:47:19:cb:da:d4:76:0e:6a:9e:44:45:98:ca:7f:d7:94:
         c8:7b:d9:6c:12:cd:dd:7d:94:40:43:44:8e:d4:f5:12:a7:63:
         01:9c:a2:e9:66:ea:69:8f:3f:cb:a8:b6:89:5a:e7:92:66:a6:
         3f:75:55:4a:5e:0b:6b:39:a2:19:1b:db:a3:eb:4c:08:38:72:
         df:95:f6:ee:c3:5f:50:16:26:33:0d:bf:ca:f8:f6:16:6b:e0:
         93:7a:04:26:e9:70:50:a8:23:24:30:57:8c:af:14:f3:4a:47:
         f6:1c:eb:7c:4f:18:43:ed:cc:96:f3:6f:be:71:a2:1b:52:e7:
         03:87:bd:3b:43:45:db:2b:57:4b:db:8d:26:2b:61:25:1c:bc:
         5c:db:89:69:86:cc:7a:9c:cf:29:62:2e:d9:a1:f6:6d:77:35:
         4d:eb:8f:5c:52:b1:75:7d:f4:1c:05:fc:3d:af:79:89:a3:6d:
         ac:6f:02:3e:7f:5d:35:4d:56:7a:dc:5c:af:9f:2b:1f:67:cc:
         53:d9:60:58:69:81:82:87:d2:fd:47:5a:84:af:59:ad:7d:fb:
         20:1f:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----