Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File:                     fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier:          eQZ4OBaGl+qqaXZ0eGUvcbKPqp2pDvigCN8BLU6jg84=
Subject key identifier:   89:64:EF:54:11:A3:60:9E:1F:D7:EE:6D:0F:5B:48:20:D1:AE:4E:F7
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer:       /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial:       01962F06A6379833462643DB559B09496E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number:          0BF0
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 7YFk8N6RNgx43dYC2zmFe5pT5VA.roa (hash: kblKELjSh5K08VMKP1lM/34cYDL9lz+wfqW+UgEqxtc=)
                          2: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: 6mRFl4qFT/DUEE8qgrC7KCsPCynwvSDeY0G4Krqyp6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:37:98:33:46:26:43:db:55:9b:09:49:6e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=8964ef5411a3609e1fd7ee6d0f5b4820d1ae4ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:81:a0:8b:ee:90:21:de:9e:d6:fe:92:66:
                    68:50:e0:53:27:46:e9:6b:ad:5d:be:99:1b:33:cb:
                    60:27:7c:2d:c8:e0:b2:ff:99:34:91:f2:cf:bb:10:
                    fe:aa:ff:4b:20:e2:d3:5c:bb:ff:ad:e8:f5:f3:64:
                    e6:cd:03:24:4c:1d:45:ad:07:33:58:26:4f:bb:d3:
                    75:77:2f:71:b4:fd:ce:b1:f9:91:f5:62:a1:a1:2a:
                    2b:a1:21:e9:c5:26:8c:4e:a1:8d:4f:e3:de:c0:d2:
                    49:d6:32:0a:86:4d:26:b3:c5:bc:5f:6b:40:10:fe:
                    f3:d3:4f:77:7e:fb:ae:91:ee:39:7f:36:c5:e0:f3:
                    9f:43:59:a3:66:7e:f3:dd:4c:08:f8:ab:13:93:bd:
                    41:81:8f:af:f9:3d:a1:20:57:ea:95:c8:bb:f1:30:
                    74:0b:db:ed:56:23:04:da:c9:18:4c:87:92:8e:0c:
                    d3:01:9d:3e:92:16:7d:d9:db:75:3f:7a:3c:5b:3f:
                    6f:fa:89:57:fa:7f:a1:8b:5c:05:5e:79:a9:85:92:
                    7b:c7:e8:89:4f:96:78:cc:d9:a3:1c:5c:fd:e0:99:
                    a8:14:9e:88:48:37:f5:73:8f:ac:0f:59:b9:6a:de:
                    fc:52:20:48:76:e4:18:ff:4d:93:93:13:c6:8d:87:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:EF:54:11:A3:60:9E:1F:D7:EE:6D:0F:5B:48:20:D1:AE:4E:F7
            X509v3 Authority Key Identifier:
                keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:36:32:a3:05:f3:38:42:54:3b:14:a7:b9:6b:27:5c:13:d3:
         87:fd:2f:fd:c1:04:ed:d6:c9:4a:f9:26:24:68:5f:46:dc:e1:
         c4:e4:86:54:11:c1:e2:26:a4:c1:eb:1e:35:4f:a5:a5:b5:30:
         31:82:65:c1:16:ae:65:c6:16:54:f2:c5:f4:2b:30:59:c6:8f:
         ad:78:73:c4:70:b2:ee:75:b9:85:ec:d3:ae:b2:2c:ac:18:05:
         77:00:dc:57:23:63:8a:9f:ca:c8:57:ee:57:61:32:ed:8f:fb:
         f8:89:81:fb:39:e9:81:6a:af:c4:60:ef:0d:56:5a:89:08:f4:
         a7:c1:b8:60:56:5c:63:08:93:44:d2:8c:4d:bb:bc:cc:50:b0:
         6f:9f:2a:b2:a0:66:87:a0:22:6a:17:8d:a7:f8:26:61:e3:29:
         91:7b:74:4c:4c:48:4c:58:5c:32:29:fe:99:97:03:97:87:13:
         4e:58:ce:33:6b:31:24:25:5d:5b:18:ee:25:21:78:92:73:1f:
         e4:56:ab:44:b0:75:aa:be:00:52:2f:47:37:ea:b8:81:5a:79:
         0e:b2:ae:aa:de:06:aa:43:e9:8d:84:97:84:98:20:17:f2:95:
         16:91:64:62:66:48:51:ec:a7:7f:56:a2:9c:ca:c1:09:20:80:
         b3:0e:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----