Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
File:                     Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json)
Hash identifier:          cQSgPzY5IFx++AFnb21QRWM8ib6d5P9BltFE8bmvEh4=
Subject key identifier:   8F:DA:BA:E2:68:BA:B4:8F:2C:C4:A6:57:EE:22:44:19:A9:F7:5D:D0
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Certificate issuer:       /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial:       01962F3D2F11E70D3E5B216A3EA8A5E07556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft
Manifest number:          11FE
Signing time:             Sun 13 Apr 2025 13:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:00 +0000
Files and hashes:         1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: zf2Kaq0Woow3lP9nPVpikz6a+YWZY6VajbdjVo0Vz98=)
                          2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2f:11:e7:0d:3e:5b:21:6a:3e:a8:a5:e0:75:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
        Validity
            Not Before: Apr 13 13:01:00 2025 GMT
            Not After : Apr 14 13:01:00 2025 GMT
        Subject: CN=8fdabae268bab48f2cc4a657ee224419a9f75dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:30:e9:3b:49:ae:bf:97:43:21:a2:7b:66:
                    ac:6a:f4:5c:2a:98:73:c1:bf:20:c7:a0:51:51:82:
                    85:61:00:94:9f:40:c8:b2:6d:cb:a8:40:8b:9f:60:
                    34:0d:fe:6f:50:76:ae:d9:07:67:60:fa:33:33:5d:
                    d4:c0:b1:c9:aa:9f:a5:ac:5a:08:55:de:36:27:98:
                    89:ba:a4:ed:aa:83:7d:fa:63:8b:c8:f5:e0:86:3d:
                    0d:3b:86:2a:32:b2:16:a0:5f:c8:24:ca:87:c1:25:
                    3b:27:cb:aa:73:13:49:81:58:33:92:ac:e6:2e:ae:
                    bf:6d:4c:4c:00:3f:92:a3:da:df:85:ed:f2:ec:64:
                    29:ef:17:42:a8:e6:43:98:6a:25:27:ef:87:10:ad:
                    74:c2:fa:06:13:02:d1:03:d4:a7:15:52:f8:1c:e2:
                    f6:e5:87:d8:c4:0b:26:e8:b8:95:ae:4f:68:61:0a:
                    39:83:97:06:0e:77:2f:6f:39:a5:a4:90:fc:da:c6:
                    a0:26:e5:0a:ca:69:38:ac:1a:98:8a:17:e8:50:4c:
                    09:a8:74:f9:16:b1:ab:08:97:51:10:09:a6:29:f2:
                    17:03:96:91:6e:14:6f:9e:54:d6:f8:a2:52:53:7c:
                    f4:b6:5c:72:2b:89:5b:85:7a:00:cc:fc:53:65:88:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DA:BA:E2:68:BA:B4:8F:2C:C4:A6:57:EE:22:44:19:A9:F7:5D:D0
            X509v3 Authority Key Identifier:
                keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:14:12:01:6c:ba:07:27:a1:4d:bf:02:af:79:fe:66:56:0a:
         a2:69:fc:ee:08:81:ab:05:da:2a:e9:29:42:fb:6c:7e:e9:e4:
         86:86:e7:b9:14:f2:32:7b:a4:c1:90:bd:18:a1:ba:74:ff:3b:
         b4:af:df:3d:6a:fb:d7:1c:19:2d:dd:d8:d0:ae:c9:ac:f4:e8:
         29:02:b6:b8:9e:89:b1:3f:72:0b:b1:c1:5b:9e:b6:ea:4a:97:
         1f:59:ad:55:63:29:2d:28:e5:e6:a4:bb:e5:93:ae:d3:5e:a6:
         0e:ab:e2:40:85:9f:db:8b:ff:02:2a:25:cb:ad:ae:4f:c0:93:
         86:64:b8:cb:af:85:92:94:60:b1:82:69:6e:60:b1:6d:85:87:
         ad:ab:35:8e:42:00:38:e8:09:8d:43:da:8d:23:e9:1a:db:56:
         09:9b:d5:ec:e9:31:46:81:53:42:a3:67:eb:65:51:bd:44:d2:
         e2:30:85:1b:c5:25:71:fb:f2:5e:3c:64:38:4e:4e:3a:ef:75:
         98:0e:78:5e:00:ae:1e:8e:13:cb:92:f9:bf:0e:ed:98:8b:03:
         4d:42:50:c6:99:91:62:c2:1e:4d:3b:46:94:26:0a:c3:2c:e2:
         ff:5f:65:14:d4:01:28:dd:4c:79:54:a8:de:b5:ad:95:3e:75:
         c2:1e:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----