Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          QDiaIlqicL7e5qdgGqyw/+3H32aI/Hzu2HmnXuyQm2s=
Subject key identifier:   0E:C9:05:E4:39:6F:80:F0:AE:99:6A:7E:F6:DE:C8:BD:C9:8F:34:A9
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       01962F06FC2A9FD99246151775878F489B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: H8lyyfZL5U2fT9J+ZOMCfZl8LNWE60jQa5+jq1K25a4=)
                          2: OhhSpunX2oFMOOPbpKEEbEzELw0.roa (hash: 3ps6+ztcgkHapstvgub1KecvUe5/zgzQ6krJXv7P6Sc=)
                          3: WfIQgLqg5iDOkRknXs8LwTd___8.roa (hash: 2fUIvuzipETi107axsQwvDcKefOjWiKRaZgxPs7El0w=)
                          4: Y_-vfLL2J88Y5F1d1jLM95Gsw6Y.roa (hash: KkWnVd3PkRGGbRuQNEdI3QvRcPN+F3+rDERlpZoK1Hk=)
                          5: iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa (hash: DzYF6jb/f2Y0zsTtOWIE735rB2ypyM5HGglTzwx4No8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fc:2a:9f:d9:92:46:15:17:75:87:8f:48:9b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=0ec905e4396f80f0ae996a7ef6dec8bdc98f34a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a6:8b:66:ff:eb:90:0a:ea:3f:de:ee:25:5e:
                    9c:fe:b0:59:7f:35:89:44:cb:02:80:ee:aa:d0:2e:
                    ad:60:f8:2a:e3:6d:5f:2a:c4:a5:0b:08:59:99:06:
                    9a:42:84:6f:c9:c1:b4:3f:a7:22:15:af:25:5d:21:
                    67:53:39:bb:10:50:fc:85:56:62:f9:ba:0c:6d:ad:
                    18:1d:1c:9f:4f:67:78:5d:c0:b8:8d:8c:6f:a8:0a:
                    be:19:a3:1c:30:4c:b0:43:3c:ff:7b:b1:81:b8:ac:
                    52:5c:74:2a:0a:47:0f:8a:3a:c5:b4:07:d1:f2:82:
                    b5:55:2a:a0:05:8c:ea:41:79:67:75:70:06:d1:5f:
                    31:4f:d2:32:c3:ad:59:4d:fc:e3:52:3d:d2:68:ab:
                    6e:f2:a1:bb:68:54:f1:d2:d1:24:eb:3f:cc:ef:f4:
                    5a:e3:b6:d6:ba:00:4a:01:e7:c9:bd:96:98:79:21:
                    8f:bb:05:bc:d7:ff:5f:3b:1c:ef:9f:70:55:39:c1:
                    d2:cd:75:c5:d7:ea:00:3b:3a:d7:4d:58:ea:e2:52:
                    62:2d:c6:6f:4a:c7:63:04:17:66:4b:46:b6:e2:d8:
                    f3:c1:59:4c:2d:2f:e0:29:77:de:b8:36:a2:3a:7c:
                    60:a4:d0:63:eb:0f:91:f5:20:bc:60:24:a5:c1:8e:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:05:E4:39:6F:80:F0:AE:99:6A:7E:F6:DE:C8:BD:C9:8F:34:A9
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:16:48:ee:56:a7:5f:f4:fb:e0:1f:eb:74:9e:d2:36:a8:50:
         50:f3:d6:c5:a4:69:a3:9d:d6:bd:0f:a3:cc:57:f2:47:6b:ab:
         3c:5f:9a:a2:5c:82:ea:bc:c8:a2:2f:65:6a:21:d0:4f:34:fe:
         6b:60:5d:f9:ac:bd:78:58:82:43:9f:56:f5:6d:53:8e:28:f3:
         5b:d1:1d:aa:24:67:57:be:dc:c7:b6:f4:10:a1:66:f2:88:dc:
         93:b9:d0:d8:b4:f3:05:44:53:2a:dc:81:39:31:1e:33:e3:a7:
         9b:dc:db:f8:93:90:59:3d:e8:80:35:10:b1:ae:3b:bc:5e:c6:
         bb:34:2c:49:0f:66:c1:83:bf:7f:f3:5c:c7:92:6f:a3:cf:48:
         1f:c7:dd:48:39:ff:0d:b8:7d:db:e4:7c:55:d9:fe:23:13:ee:
         e4:e0:5a:6b:b7:30:74:f5:ed:f2:31:f6:75:d1:e2:72:b5:95:
         31:20:0b:f1:c9:89:a3:52:df:1b:cb:8a:44:65:62:33:41:45:
         b1:f1:a8:46:1f:fa:bd:f1:f1:1d:87:07:43:27:b2:8a:2f:36:
         72:81:9c:1f:32:a7:fe:81:f1:03:51:99:39:24:b3:53:c3:b4:
         f1:e1:a0:d2:f2:04:8e:4b:e7:bc:df:06:d3:ee:01:e8:45:70:
         3b:fc:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----