Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File:                     1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier:          R87UXVNWY4+SpGj+fdm98qGWR4So31uKSZ/3/v6NWHg=
Subject key identifier:   17:B1:5C:FC:34:01:6B:9F:E8:0B:80:73:73:86:4E:66:69:FE:CE:83
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer:       /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial:       01962DF3B80EC0764101D1F544E40F43890D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number:          0738
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: j8MPwEVhmN8hWBVzb/+utQ21bkPrsGEWxOYAVS3lPRE=)
                          2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
                          3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:0e:c0:76:41:01:d1:f5:44:e4:0f:43:89:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=17b15cfc34016b9fe80b807373864e6669fece83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1f:ed:53:47:cf:0b:b7:e2:57:8b:ae:fd:ac:
                    82:14:2d:9b:df:be:8e:0a:a2:db:73:c6:73:a9:12:
                    40:b0:6b:33:32:1e:76:db:b6:74:90:9c:92:1e:db:
                    47:3c:3a:8d:2e:1d:49:56:17:71:ec:47:e8:de:34:
                    35:38:ff:a7:26:59:8f:8c:80:72:86:16:63:48:2d:
                    48:33:93:7e:61:83:05:4b:32:02:e4:c0:74:88:4e:
                    00:81:91:d1:6a:44:6a:1a:ba:24:3c:7e:fc:e0:9e:
                    d8:79:d3:8a:12:49:bc:be:e8:c1:60:53:76:d0:33:
                    c4:76:ff:f0:e6:de:2e:64:bb:c2:d9:1b:f3:7e:03:
                    27:d2:18:af:d5:74:e2:f5:f0:de:52:9a:45:cd:07:
                    c7:13:50:fb:39:84:0e:5a:14:d6:5b:7d:20:c8:ea:
                    3e:13:ea:28:c5:04:e4:00:78:bc:3d:44:13:ab:ee:
                    06:e0:06:dc:33:c4:03:1d:30:dc:74:8b:41:61:07:
                    3b:2f:0b:bf:b0:8d:b2:aa:ab:ce:62:a4:c2:bc:30:
                    7f:14:9a:84:2c:61:45:45:56:7a:5f:97:13:2b:71:
                    7b:3e:a1:56:16:b8:5d:9a:94:c1:11:08:a5:69:f7:
                    6e:f9:cb:ec:90:2d:e8:db:31:80:43:c0:ba:11:de:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B1:5C:FC:34:01:6B:9F:E8:0B:80:73:73:86:4E:66:69:FE:CE:83
            X509v3 Authority Key Identifier:
                keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:15:88:cf:a7:63:75:6a:e4:4b:77:65:10:76:92:87:e2:
         9e:74:85:9b:5d:87:8c:f9:e0:0a:4d:6b:2d:93:a1:4c:11:a7:
         84:ab:7b:bc:c8:6f:96:f6:85:07:af:72:26:b9:5f:25:9c:a4:
         37:d8:85:51:3f:eb:66:13:f0:e1:da:d0:cc:e5:e9:12:d5:5a:
         3f:2c:b1:e8:aa:63:37:68:a2:f0:2c:ab:92:66:51:4e:d8:70:
         e2:ba:05:1f:81:ae:fa:ef:85:fb:f6:26:2a:e7:a4:67:17:2c:
         75:e1:02:16:be:68:f7:07:81:b8:9b:15:bc:89:39:f5:9e:2e:
         c4:e3:eb:17:00:67:d2:4c:f4:e6:bc:a3:47:c6:ba:14:d9:14:
         5d:e2:d8:7e:06:1e:03:db:a7:96:84:ec:b1:56:03:b6:da:31:
         15:70:09:8a:2e:49:f4:4b:5b:fa:f4:3d:37:4c:4e:ab:29:0e:
         48:61:ea:17:01:fb:5c:59:b4:34:c8:9b:58:53:5e:a4:66:ad:
         39:da:80:9e:6d:96:b5:01:c0:a8:eb:d8:8e:3a:a4:b3:1b:bf:
         2f:36:4b:1a:cf:86:35:8d:be:08:4d:45:a2:43:16:e9:7c:29:
         3b:ec:68:1c:9c:06:b5:32:87:e9:84:9e:80:25:ef:1d:34:fe:
         45:c9:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----