Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File:                     _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier:          k8j50xUGIQGaUzgUX1LIQdPg6fN6YBIjrz0R87hv4wQ=
Subject key identifier:   3F:92:9D:D5:E1:2A:EF:A8:04:25:22:7D:25:43:1B:61:B5:A4:B3:BC
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer:       /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial:       01962F74D5C9F364EA65A519527D17638F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number:          DF
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: IyW3Mrk7S8n6isls5YWVTrLMt0T5l0F+PSz7S0Gsksg=)
                          2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:c9:f3:64:ea:65:a5:19:52:7d:17:63:8f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=3f929dd5e12aefa80425227d25431b61b5a4b3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:13:7e:e8:ef:99:1a:32:09:bd:7d:b6:06:
                    98:c0:81:d3:78:a3:34:52:70:42:19:de:a8:60:12:
                    86:a2:0c:c7:78:e7:50:46:21:1e:7d:79:d8:18:0c:
                    cf:2d:93:22:4b:be:1f:cb:56:db:a5:78:86:db:5d:
                    00:15:f2:f2:55:c1:b6:73:fe:b5:61:06:40:50:10:
                    b1:fd:56:75:b8:90:51:36:f8:93:ed:f5:a7:40:da:
                    18:7d:65:54:ad:48:4b:a9:47:0f:a5:3f:db:46:5b:
                    52:fd:75:bb:6b:2b:f6:05:bd:ac:47:e6:4e:9b:1f:
                    89:cc:9a:ba:1b:e6:0b:69:af:1f:a8:98:2a:08:da:
                    34:2c:76:ff:02:87:03:df:3a:0d:4b:d8:93:c1:a5:
                    a6:98:47:a8:d1:a2:b1:93:a3:1b:47:c4:b6:ab:0d:
                    06:b1:9e:be:e8:65:80:e9:d4:b4:e6:56:ab:ea:8c:
                    3d:a6:48:19:ad:b3:3e:33:f4:d9:21:c6:c2:d1:0d:
                    f3:d0:ad:06:15:92:af:4a:27:47:fc:f5:23:ab:a4:
                    fb:cf:d5:12:26:e4:70:4c:eb:dd:b9:a8:7c:5e:f3:
                    dd:26:32:44:6a:44:40:16:76:ec:81:cb:cd:22:50:
                    7c:0c:75:85:bc:c4:52:38:89:f3:58:9d:f8:7d:b2:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:92:9D:D5:E1:2A:EF:A8:04:25:22:7D:25:43:1B:61:B5:A4:B3:BC
            X509v3 Authority Key Identifier:
                keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:35:e2:d5:39:15:1e:75:db:19:49:c2:77:23:00:14:14:6c:
         02:83:8f:f9:b1:2a:5a:97:df:b9:39:1c:5b:76:6b:ca:8d:ea:
         0e:f2:ef:83:6c:81:92:8c:31:85:99:92:f3:91:77:31:81:26:
         f5:a9:cc:e9:9b:a4:d4:eb:62:9f:2b:f3:71:a4:d1:65:bf:0d:
         a7:0d:2b:e7:2f:8f:f4:34:f8:aa:25:3c:b4:c6:6b:e9:f8:53:
         76:ed:63:86:f2:5e:c6:34:45:07:bc:9f:4c:e1:4f:59:16:75:
         89:b8:08:cc:f8:c4:81:71:26:b5:36:d9:af:b6:f4:cc:9c:85:
         dc:28:e6:d1:24:a6:83:d3:11:01:37:85:4c:7b:9e:2e:12:1a:
         8e:0d:1d:79:8d:09:61:da:c7:f8:cc:2c:2b:9f:c5:3c:83:04:
         76:d2:e5:58:0a:97:6f:7a:53:28:78:72:15:f0:ce:3f:07:aa:
         9e:65:ef:3f:ca:02:6d:f8:ba:1e:5e:df:35:e3:4b:b8:e1:21:
         57:3d:79:37:3a:5c:51:27:be:48:09:94:81:c1:b0:0a:71:96:
         cc:be:f5:e2:0b:32:c7:71:5d:b2:22:ea:d8:fb:c9:4c:fc:65:
         93:cf:7c:ba:57:76:ae:4a:4a:f1:b8:d3:8a:5c:d2:56:5f:73:
         f8:02:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----