Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File:                     Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier:          EPrfEAywd8N5XVAkzdzE4ExuCkwUXMT7Kl5+a1tHPGg=
Subject key identifier:   FC:B7:48:D0:83:11:2F:D5:48:63:3E:9B:CA:74:C8:14:08:0D:29:CE
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer:       /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial:       01962F067EC54EC4742C940B12D10741B44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: FbCIDG+EcojVlu/i31ifflBo0KmjzGOJBK4ZDKkN5xY=)
                          2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:c5:4e:c4:74:2c:94:0b:12:d1:07:41:b4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=fcb748d083112fd548633e9bca74c814080d29ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:52:72:83:fa:86:12:e9:0d:ea:b6:5f:3d:
                    21:eb:a3:2e:7e:11:d2:62:78:1a:b0:92:99:17:fc:
                    32:24:7d:d3:4e:df:98:05:bf:34:67:48:3d:fd:de:
                    67:53:07:bc:17:7a:7c:ea:64:f9:d9:21:40:77:33:
                    e5:4c:72:c3:b0:7a:fc:b4:c4:2f:41:73:9f:99:02:
                    cf:64:2f:10:f0:d4:eb:18:74:05:3d:95:0f:c9:e4:
                    a5:75:10:30:29:4f:43:19:db:04:c7:48:8c:d4:42:
                    68:72:e7:17:f5:62:bf:08:2c:c3:77:b6:6a:e4:ce:
                    68:10:8a:d1:8e:20:12:6d:04:43:fc:a1:00:d3:07:
                    6e:9e:d8:22:d3:71:38:fc:75:e3:88:d4:a9:ca:c6:
                    99:fc:ca:46:97:66:42:23:cb:22:4b:35:f6:1f:41:
                    fd:38:b7:08:eb:49:de:15:3c:df:f1:5b:50:97:a4:
                    85:54:40:80:90:9a:0b:fb:7c:7f:0e:9c:05:28:f9:
                    49:36:09:75:a7:5b:6f:fe:3c:29:91:58:53:b6:9f:
                    b4:42:7d:00:8a:af:63:79:f6:93:b0:1f:1a:b1:c0:
                    ac:42:85:0f:ce:5a:28:c5:fc:17:31:3e:b3:72:57:
                    8c:cc:7c:10:95:8a:2e:ff:cd:f7:bb:2c:78:5c:74:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:48:D0:83:11:2F:D5:48:63:3E:9B:CA:74:C8:14:08:0D:29:CE
            X509v3 Authority Key Identifier:
                keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:00:b6:6d:8e:ac:a9:9a:d5:b8:14:f0:c7:35:d4:5b:a9:
         cc:6b:14:fb:20:ce:99:d7:8f:1f:9d:e8:d3:00:99:62:80:50:
         9c:09:da:89:a2:4b:7a:ba:e5:aa:c6:de:9d:80:54:c1:dd:9c:
         3c:ad:41:95:a4:78:83:df:cd:da:41:94:18:40:44:5b:b4:f0:
         fd:7f:43:65:87:4a:3e:dc:8a:35:d0:6c:35:b7:eb:7f:76:c2:
         4a:d4:f4:8d:49:18:6b:a1:50:a6:02:63:17:4b:d7:34:03:f7:
         5e:49:93:5a:87:80:99:0a:26:93:d1:2d:a2:67:7a:1a:77:c5:
         57:0e:8e:45:82:ff:e9:e9:b0:fe:09:2e:c6:d5:56:5f:59:ea:
         eb:34:cd:56:42:10:a1:b8:ef:57:a3:c3:17:b5:13:d1:c3:3f:
         79:cf:2d:5f:06:e0:6f:33:56:22:d2:9b:7e:f5:58:dd:35:81:
         14:1a:43:f0:4a:8c:f7:7c:0c:9a:06:be:f0:f7:63:2b:5a:01:
         2d:e1:f9:1d:8d:fb:e5:0a:48:9e:b7:93:a8:b0:cd:ae:70:e2:
         a2:ec:48:32:04:a3:a7:ec:f7:02:dd:55:c6:dc:93:99:7a:8e:
         8c:0c:82:3f:86:c5:56:8b:4e:f6:89:41:fb:f4:1f:e1:ee:f9:
         0e:ba:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----