Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          mIjjweFfyjRGbmwhpFms+TRORFCVS6SQGTWB5of/5/s=
Subject key identifier:   89:19:87:C4:0D:F6:D1:95:3A:77:C4:AC:40:29:9D:A1:15:BF:AC:48
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       01962F071E1901EC55B2EC08AA60C3915333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0960
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: vwplOC8fFnfyEVoNQFSzOxFPwL7B4mPIFo5d8t6iBqI=)
                          2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1e:19:01:ec:55:b2:ec:08:aa:60:c3:91:53:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=891987c40df6d1953a77c4ac40299da115bfac48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:04:e1:e0:d1:20:8a:28:a8:d1:f3:0f:f0:
                    32:df:8c:9c:50:c9:4c:3a:68:40:10:2b:7c:76:11:
                    70:ee:35:ce:7a:6d:36:b2:fc:c1:e3:8b:5a:b5:81:
                    8a:72:da:b9:8d:b2:0e:43:d7:f5:be:5e:74:5d:ea:
                    32:a4:23:32:77:85:47:d3:1f:3d:55:44:c5:ac:7a:
                    3d:dd:ca:6d:23:93:d6:0e:75:8a:5b:0c:56:8c:5b:
                    25:c0:81:d3:32:ed:fd:d2:3c:6a:a9:07:25:08:49:
                    bb:ad:c9:ad:c0:27:5d:43:35:9b:2b:d0:f6:99:d5:
                    f1:b6:a9:e2:5f:03:b7:25:21:d3:97:4e:95:44:fe:
                    24:f8:90:2f:8e:50:4f:85:b9:8b:cc:47:36:99:fc:
                    4e:41:3b:f3:41:bf:95:1b:8f:cd:84:15:a8:12:ef:
                    2f:01:69:0d:e2:28:90:de:6b:c1:da:e4:32:26:78:
                    ac:2b:3b:8a:ff:eb:24:2b:3f:60:2d:4b:03:78:8c:
                    21:72:89:f3:b0:61:ec:7c:2a:25:7c:11:b5:04:66:
                    18:cb:a6:44:63:4d:4b:53:a2:7b:d4:26:94:f9:ec:
                    84:27:9a:f6:ce:7f:30:aa:e1:4c:96:0a:c2:aa:93:
                    1c:62:a8:bb:c4:0d:49:69:4b:39:a2:81:b8:c7:13:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:87:C4:0D:F6:D1:95:3A:77:C4:AC:40:29:9D:A1:15:BF:AC:48
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:ae:35:b2:a4:6c:38:e2:69:e6:6b:77:4e:ee:e1:c3:1e:
         34:24:e9:44:dd:30:1b:1e:84:ef:b2:a3:6f:0c:8e:54:67:5f:
         11:8f:1c:64:d2:75:1f:c7:f0:4a:e0:f7:35:0f:29:1e:56:61:
         48:d7:9d:27:61:fe:59:ad:15:94:a3:b7:77:30:18:be:88:32:
         3a:9c:3f:ca:99:e9:56:10:8e:3a:a8:05:d0:a7:5d:ea:6c:6c:
         c5:02:58:18:d0:e8:0c:91:51:9f:ba:40:9f:94:27:b7:b8:e3:
         7b:a2:ec:57:91:08:f4:25:23:85:31:53:2a:ff:60:60:ee:3e:
         38:6d:5f:51:74:35:3e:02:6f:74:d3:e1:b9:25:da:60:48:fc:
         56:aa:fe:95:14:e0:a3:f8:a8:a7:02:22:1d:34:22:8e:bd:4f:
         f6:05:d6:2c:9e:4f:a5:e4:ea:a7:0d:af:22:bd:74:a1:ca:86:
         c6:1b:f8:4a:ef:31:b2:a1:a3:ff:00:9f:24:c0:76:40:43:d5:
         89:8a:71:76:64:17:72:4a:99:ba:10:87:b3:95:81:76:d4:c7:
         d2:a7:c7:40:77:b8:77:0e:b9:0d:4e:4a:5e:1a:f3:ce:8e:2a:
         81:1a:d5:d2:5e:9a:3d:09:2c:cb:4f:df:14:4a:8e:58:b4:cc:
         3f:5e:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----