Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File:                     fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier:          HkEz4rsVRa01bqz2V2wrKzvCCq78pQAM5m1kJcVG4pY=
Subject key identifier:   49:F0:BB:6E:32:D6:77:57:C8:97:1A:25:EA:19:74:1B:AE:98:F6:C9
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer:       /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial:       01962E998B2D598E6BD41AC6F0897BB51422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number:          0A1F
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: XDbrvNT86ISN_spCbo4xvAzpVp4.roa (hash: VdcMI142dXyMiD8Y0gV4McGw1NiqJuUGtwcS5l0geTI=)
                          2: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: 5E+zSxFXzPs6wIxn1tgXBqM1lzPPews1Qg3UX/y+ncc=)
                          3: ziT1KvRp4nclVM5reU3sOFNH1x4.roa (hash: Q4C5iLbiXkuuyYxp+dYvmqYFnNUxA4NFMnWPDomm2KQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8b:2d:59:8e:6b:d4:1a:c6:f0:89:7b:b5:14:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=49f0bb6e32d67757c8971a25ea19741bae98f6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:d4:80:95:27:bc:6b:fa:27:e3:8d:20:f4:
                    77:63:9a:0f:75:4f:46:09:83:0d:c2:aa:b0:25:64:
                    d3:22:c7:aa:bf:22:eb:fb:6d:af:b4:d3:64:9f:71:
                    64:12:0f:4a:54:65:03:19:36:53:14:97:22:8b:bb:
                    eb:97:92:51:42:85:87:c5:e6:ec:24:5f:b3:39:07:
                    89:1a:b1:bb:c9:0d:c2:94:c5:a7:60:08:30:7e:ed:
                    90:2c:91:1a:80:4a:39:cc:0b:fc:12:89:76:9b:5a:
                    9e:6b:1f:67:5d:9a:6c:c7:c5:1d:b3:df:de:b7:90:
                    72:41:04:79:6d:46:94:ee:aa:bb:2f:fe:9f:0f:99:
                    23:e6:53:f5:a0:25:17:cf:2a:58:5e:23:15:57:a6:
                    dd:4c:21:d3:bb:39:cd:ae:cc:41:92:62:95:e4:78:
                    e5:33:c4:ca:27:9e:8f:a3:ec:b5:59:77:d0:48:14:
                    3a:ed:78:79:5a:ab:a4:00:47:73:f4:49:cf:a0:87:
                    00:d7:7a:d8:92:20:f1:af:82:b9:0e:9c:4a:64:82:
                    d2:0d:2b:1a:30:e1:3b:f1:74:69:64:2b:4c:be:1e:
                    19:82:88:cd:e7:d7:95:07:ea:8c:ce:90:bd:7b:d5:
                    62:e0:9f:8a:f0:a2:42:2f:f8:38:1c:12:3d:ad:14:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F0:BB:6E:32:D6:77:57:C8:97:1A:25:EA:19:74:1B:AE:98:F6:C9
            X509v3 Authority Key Identifier:
                keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:3f:bd:d4:bc:66:8d:84:91:e1:37:a3:44:be:e0:d5:4f:
         c6:54:e2:56:d1:f4:61:39:25:ae:de:0e:a8:60:96:b3:e0:3a:
         49:b0:aa:7d:e8:78:ff:02:7d:ff:c0:33:1f:b3:56:c5:31:d7:
         3a:18:5f:d5:09:93:1f:98:bd:f6:a6:62:31:e4:9c:80:bf:d7:
         ea:19:64:f7:f1:52:6b:32:51:ff:69:a4:34:5b:af:a0:c6:e8:
         13:be:3d:0c:43:41:09:02:d1:77:d3:a3:f9:03:c7:ba:40:5f:
         fa:3a:15:38:29:dc:8b:16:fa:43:be:ef:8e:f3:4f:73:7f:7d:
         1c:bb:d3:49:b6:a7:07:98:da:a8:89:a5:64:a4:08:d8:95:8d:
         68:d1:d5:42:ea:ee:8d:9e:72:48:1a:17:55:ba:fc:27:fb:07:
         0b:16:22:cd:a7:a5:7c:40:67:09:d9:83:5b:2b:df:10:d0:c3:
         09:6a:62:6a:4c:99:6a:da:62:c0:ec:45:35:a1:86:06:62:28:
         26:74:f0:67:ee:a6:c0:b6:a9:5c:dd:00:98:75:46:60:dd:ad:
         5e:40:d1:40:0b:ee:6b:fb:15:6e:51:31:2b:41:4f:08:d5:dd:
         cb:bd:d0:ea:d9:90:ac:ec:4e:a0:8f:c9:45:e0:be:9c:44:54:
         7f:5c:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----