Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File:                     FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier:          fM8nu/npd1lexjWcobtbPXWVYvZVe2yk6v838fRqDFY=
Subject key identifier:   AF:0F:22:FB:E4:06:65:40:B1:02:CA:8F:FE:70:96:2D:7C:D8:B0:CA
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer:       /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial:       01962F7478D536565DC1222B5CAA6488AA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number:          0379
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
                          2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: s4ltR82l2pq3V2SkACIA8yxIG/uj0h/QuEXASsMJXzo=)
                          3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:d5:36:56:5d:c1:22:2b:5c:aa:64:88:aa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=af0f22fbe4066540b102ca8ffe70962d7cd8b0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:db:32:82:fd:44:40:86:96:e6:da:9b:18:
                    3a:c8:75:cf:04:e3:58:6f:4a:15:59:62:fc:9f:ea:
                    96:d0:74:bf:83:df:2b:4c:c8:c7:cb:82:7a:27:7b:
                    e8:61:17:1c:c2:60:91:09:c5:d1:76:fe:aa:a9:1e:
                    dd:a5:41:ec:eb:ad:a2:08:8f:a4:b3:3c:ea:bc:b9:
                    50:8a:96:71:cd:3b:21:28:50:c1:6a:f6:28:53:b3:
                    d7:6b:fc:5c:da:8c:ac:30:9f:54:08:f2:8d:51:a9:
                    cb:fd:6a:b1:84:4a:c9:fc:5a:61:40:e1:d9:56:01:
                    33:7a:fd:2e:b4:01:70:cd:ea:c6:7b:bd:c4:e9:ac:
                    1b:1d:ef:26:5d:bf:29:78:b0:5a:fb:28:48:21:b7:
                    b8:11:08:9c:32:96:ae:98:d0:68:18:d2:0a:c3:b9:
                    ac:0b:2b:11:b7:c8:5b:1a:fd:0f:68:73:3e:04:1f:
                    87:a8:fa:b6:1d:a8:f4:6e:11:dc:2b:a3:74:39:6f:
                    da:67:e2:45:e0:f2:0d:86:66:b5:88:82:46:45:b1:
                    ce:5d:3d:5a:ed:f4:0d:0e:b5:fb:b0:7d:52:bd:1e:
                    db:6f:f9:dd:e0:8f:9b:c3:71:b9:58:e7:7c:d7:65:
                    92:bf:82:09:c6:68:c9:41:8a:e6:34:39:80:5c:12:
                    8d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0F:22:FB:E4:06:65:40:B1:02:CA:8F:FE:70:96:2D:7C:D8:B0:CA
            X509v3 Authority Key Identifier:
                keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:26:06:5f:52:e8:9f:b5:02:ae:1a:da:6b:1e:28:a9:8b:20:
         b4:89:9a:49:b8:80:c9:f2:f6:ef:cf:06:9a:cb:dd:da:9e:9d:
         c6:67:9a:2c:b3:17:23:f6:26:34:45:3f:c6:81:40:a6:a5:e2:
         96:cc:a1:11:3c:6a:04:49:4f:2e:c1:e6:cc:bc:93:15:75:f6:
         7b:c0:4e:e0:5e:29:1b:97:27:65:24:00:47:1f:d7:2c:48:b3:
         db:a4:a6:a1:8e:a3:8f:23:10:c3:38:8a:ea:6d:4c:f4:ee:db:
         7e:5a:51:ff:53:26:05:7f:a2:5f:08:2d:1b:34:28:6d:b4:fe:
         49:2e:ce:f5:a5:c8:ab:19:4d:92:d6:01:92:24:22:de:f9:e6:
         5c:49:f8:82:c7:11:ed:4d:44:da:6f:12:04:13:2e:3e:b3:48:
         96:1a:b9:ac:40:d6:d0:bb:d3:f8:f1:ee:2c:62:2e:fb:9b:2e:
         6d:05:c1:b0:e9:fa:c6:67:70:f6:e2:fc:57:1e:e7:d1:c3:ec:
         f9:ec:59:90:f6:95:a2:d4:a5:ec:09:3c:16:dc:1a:c6:49:aa:
         ad:63:ad:03:9d:cd:44:0d:45:28:4b:b8:ac:0b:bc:01:3e:7b:
         15:cb:61:f3:9a:8b:4b:da:8a:af:4e:af:83:6d:5a:7a:bb:fb:
         3f:09:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----