Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File:                     _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier:          qWjpFqHWNpuXk+i6huprqNW/Eeon28gPi6vO/tgzJ6k=
Subject key identifier:   1A:24:6B:A3:FF:81:C5:04:F8:48:98:46:E2:25:C8:E8:C5:91:9E:A8
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer:       /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial:       01962FABB4B7452591832CEB63AD409D2506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number:          1291
Signing time:             Sun 13 Apr 2025 15:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:44 +0000
Files and hashes:         1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
                          2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: Qc7OfQAKbUArflL5HPnE1Ir4WpfhifpzUuRc0tfFxLg=)
                          3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b4:b7:45:25:91:83:2c:eb:63:ad:40:9d:25:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
        Validity
            Not Before: Apr 13 15:01:44 2025 GMT
            Not After : Apr 14 15:01:44 2025 GMT
        Subject: CN=1a246ba3ff81c504f8489846e225c8e8c5919ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:b3:e0:4c:0c:e4:3a:b8:92:f5:8a:77:54:
                    4f:69:a9:70:4d:ac:0a:2f:d4:ab:e2:c8:b7:16:ea:
                    7f:ba:08:50:92:3b:28:0d:c7:69:f0:01:0a:25:71:
                    1f:32:e9:a5:3c:61:11:58:85:d2:cb:b6:76:b1:28:
                    44:ee:ab:55:3a:ee:70:d9:54:7c:98:55:5d:dd:a1:
                    80:d2:f7:8d:5e:32:27:0b:49:c0:0a:93:03:b5:ed:
                    14:48:e4:13:27:65:8e:6e:60:13:49:ba:11:79:4c:
                    9e:f9:c4:95:c1:9b:33:8f:21:72:af:6f:04:20:0a:
                    65:4e:51:0d:d5:95:32:e9:35:51:63:f4:43:ce:f2:
                    28:98:b9:7c:9e:cc:44:2b:ae:4c:fd:30:68:e0:31:
                    9e:44:05:2e:32:01:58:07:2a:b0:83:27:b6:87:0e:
                    3e:81:43:8e:fd:b8:49:01:b4:30:98:35:6e:98:9a:
                    d4:04:8b:80:c8:23:77:97:dc:20:6b:3e:88:34:1b:
                    29:17:24:59:f8:a3:ec:12:1d:5d:f9:19:13:22:e6:
                    49:b1:3a:91:47:15:f5:29:88:48:03:7a:67:e8:e8:
                    a7:34:57:95:16:11:7d:2e:2a:40:d1:8f:c5:ef:71:
                    9f:3b:e7:d8:f1:bf:3b:bf:74:58:2a:67:03:8c:9b:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:6B:A3:FF:81:C5:04:F8:48:98:46:E2:25:C8:E8:C5:91:9E:A8
            X509v3 Authority Key Identifier:
                keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:0e:e3:7d:5a:50:78:f5:09:52:49:8d:75:6d:63:80:55:
         b1:cb:b3:db:6a:ca:12:ca:d3:43:ad:12:bb:0b:ec:40:72:74:
         3b:44:87:46:f7:bb:91:91:20:cf:40:1f:70:08:8c:a8:91:98:
         5f:3b:32:f6:46:99:82:64:6c:05:9f:12:2c:d5:32:d4:8f:a5:
         e0:c9:1e:70:4c:91:4e:fa:0d:56:6e:ca:42:39:08:8a:59:20:
         84:18:60:6d:80:3b:ec:78:58:6b:2b:40:7b:51:c9:8c:bf:95:
         cc:99:43:7d:e6:53:c3:4b:0d:02:b5:78:0e:06:3c:62:fb:99:
         04:09:fc:d7:4c:3a:09:f0:e2:d0:34:9f:68:6c:d3:ef:d7:e7:
         97:03:0b:4f:43:b0:7d:84:cc:96:46:67:4e:c2:3c:c9:6d:f4:
         d9:1d:01:0a:49:df:d9:25:e1:41:3e:12:7c:20:e3:e9:c4:64:
         c5:e4:e2:28:ac:ba:3f:74:f0:02:e7:d0:ba:cf:83:d7:a6:4b:
         94:a8:d0:35:05:2e:3e:8a:cf:b4:71:ce:8c:f9:fa:78:b1:3a:
         2b:52:9e:b7:de:1d:58:43:6f:21:0f:e8:cc:6e:6a:a5:30:ca:
         3c:2f:c8:7d:09:84:89:cc:3e:a2:dc:29:34:13:a4:d9:6a:c2:
         b8:51:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----