Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          l/QZqPeUBFsyEIpFQOc718qeC4S4yej/1UibZUso7iA=
Subject key identifier:   C5:9C:66:CC:85:14:00:36:52:13:D4:FC:BF:C6:84:B0:06:81:37:85
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       01962E61E2C97A406E04FF6D7A776C71B26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          0EED
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=)
                          2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: TDZ71rclxBtuNfsteMoS/aT7ylEXPO3SeUwJcH3U9Yg=)
                          3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=)
                          4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=)
                          5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:c9:7a:40:6e:04:ff:6d:7a:77:6c:71:b2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=c59c66cc851400365213d4fcbfc684b006813785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:48:31:f0:d2:27:f9:94:70:4d:cc:0a:b8:
                    0d:f5:4c:24:cc:41:e4:49:3c:68:1d:15:63:89:4c:
                    75:fd:35:bb:3c:99:0d:eb:cb:8e:78:c2:21:c7:79:
                    82:76:60:f9:07:78:0d:ee:ce:f2:23:2b:e3:dd:68:
                    41:72:fc:e9:a2:c1:7d:1b:d4:e8:c9:97:b2:dd:7a:
                    43:26:df:8e:d2:70:8d:c5:0b:30:f2:1e:08:56:46:
                    2e:01:9b:67:bb:a9:7a:1f:d8:1e:af:ee:77:48:33:
                    ff:d1:e3:87:2f:22:f3:5d:22:69:12:ea:58:61:ae:
                    ce:e1:61:b5:8b:be:5e:b5:53:89:c0:5b:c4:6a:e4:
                    4c:be:a5:34:e2:5f:fb:ff:87:3e:f4:e7:51:1a:ac:
                    bf:08:d5:98:a1:bc:d6:17:a0:0f:30:78:b6:6c:14:
                    04:d1:74:ec:16:1d:33:0c:09:e6:b0:7d:a9:25:eb:
                    84:6a:cc:0d:af:de:a3:bb:98:0a:37:38:1e:01:d4:
                    25:74:aa:b3:c5:1a:7e:c9:86:e0:07:6a:94:59:c1:
                    79:16:e8:f9:cd:e9:92:b5:82:d6:5f:02:23:7c:a0:
                    c6:18:9d:51:24:d3:49:52:49:24:e2:3c:fe:bd:e6:
                    bb:09:4f:fd:b4:73:c3:2a:64:39:e4:27:c4:a2:6d:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:66:CC:85:14:00:36:52:13:D4:FC:BF:C6:84:B0:06:81:37:85
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:08:65:c9:f8:3c:9f:5c:0e:2d:01:66:3b:39:cf:ae:ea:30:
         70:d3:df:2a:c3:c8:1a:59:53:94:74:a3:7a:8d:54:17:cb:c9:
         fb:62:c1:12:f1:13:70:36:e7:62:fa:5e:b8:03:50:77:e6:2d:
         3e:29:e8:3b:4a:ec:b4:36:2e:36:d4:16:29:52:26:ab:18:f6:
         34:e7:7f:78:2e:94:00:91:e1:eb:e2:e2:5f:f8:ca:b3:e5:e0:
         eb:6e:1b:15:4b:23:ec:b2:dc:07:ea:88:7c:ba:7c:ef:41:d9:
         49:11:54:91:0a:a5:5a:1b:da:da:8b:f0:da:64:6b:17:74:ae:
         23:a4:e1:96:3c:8c:06:ed:17:22:59:4b:d3:d8:2f:ae:f6:eb:
         e1:65:e2:43:a3:37:9f:29:a1:55:5c:21:f5:a5:15:f0:62:90:
         ec:9c:b8:a0:06:d9:41:0c:f8:7d:b4:e5:03:7e:e4:37:3e:c7:
         31:f4:ad:a8:fe:c2:ba:11:bd:cb:e9:04:f2:01:da:a7:34:85:
         0d:dd:7c:a5:2a:b4:18:e3:ea:c8:bf:1e:3f:08:8c:a4:b8:d7:
         2a:8d:49:53:98:ea:5d:73:77:03:fc:59:5f:93:9c:22:8b:38:
         a1:54:03:3c:0b:d2:f2:ce:e7:d6:bc:79:16:2c:99:53:78:97:
         31:8c:35:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----