Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File:                     1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier:          LxHQjeVnBbuwxYx6bPvfIFVvgu6b0A7yrJ4j2eo84jg=
Subject key identifier:   57:E3:A6:88:C7:CA:92:73:4D:C4:B2:0E:07:70:E8:53:32:F1:89:BA
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer:       /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial:       01962F746B0DC15266D8877B92B1C8F96763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number:          118C
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: cE4zwiN/NZk5EetDfpse9c6xOBIYDNbN5tIgmENFvzg=)
                          2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
                          3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6b:0d:c1:52:66:d8:87:7b:92:b1:c8:f9:67:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=57e3a688c7ca92734dc4b20e0770e85332f189ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:9e:0d:16:b8:3a:0b:96:1e:e4:05:38:8f:
                    1a:b7:fb:f0:d8:7c:d5:6e:b0:e8:5d:26:d6:d6:08:
                    2e:64:3e:5a:a5:99:c5:0a:28:4c:fa:ed:9f:6d:7d:
                    ac:80:23:d5:0c:2a:f3:47:a4:24:0e:8d:aa:ce:0e:
                    63:c0:d5:56:bb:e5:4c:68:84:35:c5:31:90:93:78:
                    bd:96:01:55:90:7e:65:5d:16:d5:1c:cd:c3:28:4c:
                    7d:f6:4c:b5:ab:ad:71:df:cb:f5:44:de:2b:45:b2:
                    cd:49:38:23:ff:80:59:d8:9f:87:38:0b:a3:83:66:
                    46:d4:88:ee:54:b7:06:fe:1d:be:b3:10:ff:7b:8e:
                    86:26:ce:85:4a:a4:0a:e0:af:bb:d8:e6:4c:39:e1:
                    57:9d:d7:a2:60:13:81:6e:39:d9:ed:fa:22:dc:a6:
                    b8:90:78:00:73:6a:ff:01:a3:11:ff:78:a6:d4:5f:
                    01:a1:41:35:10:b8:c3:2a:ec:89:45:44:1e:9e:9f:
                    ca:cc:10:8e:12:d4:e3:ae:e9:d1:9f:5a:4e:45:18:
                    a6:ac:9c:14:f2:df:44:8e:19:2d:d7:02:d5:03:fd:
                    eb:1f:f5:f0:25:f2:a6:2f:24:4f:5c:fe:e2:a5:de:
                    da:69:6d:81:87:e3:78:db:dc:ed:70:6d:c7:b2:bb:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:A6:88:C7:CA:92:73:4D:C4:B2:0E:07:70:E8:53:32:F1:89:BA
            X509v3 Authority Key Identifier:
                keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:f6:94:f8:1d:4e:ca:54:0d:c1:1a:0b:47:2c:3c:c6:83:
         7b:ad:18:c4:3d:9f:b8:01:c5:72:a1:42:38:49:a9:06:b1:a5:
         4d:b3:52:38:82:75:41:1f:61:9c:52:42:78:cf:83:c1:71:d3:
         70:14:0e:c3:79:99:3a:01:60:36:98:ea:2d:f6:71:80:b6:cd:
         1b:91:cf:8c:4d:07:52:0f:df:81:45:1f:15:1d:e4:22:89:b6:
         f2:0b:0a:b3:8f:c1:30:f3:15:9c:49:1d:5d:44:0e:8e:89:9f:
         46:0a:be:5e:41:15:38:f1:9a:09:69:ca:43:23:d7:44:42:51:
         7f:b5:45:9a:fd:f4:9b:16:59:eb:48:9c:1d:8c:35:6d:34:90:
         3f:e7:d4:15:41:eb:67:95:a2:0a:f5:2b:ba:1a:bc:0e:fc:e1:
         e9:30:45:07:39:92:d1:d1:df:3b:84:ea:d8:a6:d5:7f:5b:3d:
         8f:f3:68:7f:c3:e5:e3:66:65:8c:ba:03:da:80:f4:e2:29:0e:
         63:6d:c8:22:05:f7:e0:fd:80:76:ed:aa:2c:13:9d:6a:02:af:
         6f:f2:e5:4c:3f:d9:b3:96:75:9d:dc:dd:af:7c:20:f9:fa:14:
         60:31:a3:23:ad:2a:e9:6a:86:99:4a:16:5e:0b:8e:59:95:a5:
         4c:c5:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----