Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          NU+GNr8Kfafed3Y9rOFx4gyR2qYLiyUhwfr6qDBna8Y=
Subject key identifier:   42:E4:E2:7A:71:60:37:6D:F2:02:C9:65:8B:43:E9:1D:01:A5:95:96
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       01962E2B15D6245AC58AC97FD9A3C2B55C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          1472
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: 9Ub8EEhdQzmzHAX+hPusWJ2rvWezJc9338xCA3vo32o=)
                          2: 3snRbpN2IGbVOo0FBzCUwBaJ8fA.roa (hash: 3Oueo8OlDtIcQuATt+YhMGVuFQeK2ksk6bcPZePfS/4=)
                          3: KMXluT6TOsSlWcB3G1q4rPwDNcA.roa (hash: R/5jz/dg8ARqO/CDKEd0xCdgxtFCjK3wYj6Mgv/XE8c=)
                          4: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (hash: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=)
                          5: Vy_8OYOh1TkU0Trz5L0_pUaLaDQ.roa (hash: 45fnTuIrYPX+ZgzLb3UCCORtFF74in0AsBskP4DlDf0=)
                          6: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (hash: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=)
                          7: nBiSvI3CgibyhdCc-vXnlYd4Qos.roa (hash: lB+X4Z+d5bHs9BP0hCzXYJGLhwG5CXPhaoH5VNrFQ7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:15:d6:24:5a:c5:8a:c9:7f:d9:a3:c2:b5:5c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=42e4e27a7160376df202c9658b43e91d01a59596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:96:21:42:22:f4:49:b2:d7:e1:a4:46:bb:
                    79:89:8c:7a:9b:50:91:00:84:db:f7:f2:b7:5b:81:
                    cd:03:41:32:29:97:39:73:ca:b5:99:4f:58:5b:f2:
                    17:86:54:98:c4:9c:03:e4:19:df:ac:c5:bb:6a:40:
                    60:b2:28:b9:c6:3f:15:d8:f6:3a:49:05:24:bf:db:
                    1e:18:d5:53:bd:75:36:1d:b1:4c:e4:74:0c:6e:f9:
                    4f:c5:dd:ec:96:ef:ea:b9:0b:a0:8c:d2:65:65:85:
                    38:ea:60:9e:1b:70:6d:86:20:26:86:0c:d3:b5:f3:
                    c7:0d:10:cb:36:29:30:bc:ac:16:d9:39:40:be:a0:
                    a8:6a:4d:de:bd:1b:4b:20:31:be:23:a8:cb:48:73:
                    9e:9d:a6:bd:42:25:4e:89:49:6f:54:a4:a4:e1:4d:
                    19:bc:b5:ea:b9:05:7a:ba:f2:16:0b:0c:c6:06:23:
                    7f:eb:8e:a8:41:a1:df:b6:6a:fe:2e:62:e9:cc:63:
                    a2:c8:9d:5d:7f:bc:d4:aa:1b:13:9b:93:dd:8a:69:
                    9e:16:8c:b8:60:cf:ff:f9:fc:20:cb:f3:6d:85:dc:
                    eb:cb:68:7c:31:8b:5a:39:d1:56:f9:7b:bd:04:cc:
                    ae:26:ed:23:1b:5d:e2:62:33:74:23:64:a6:b5:93:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E4:E2:7A:71:60:37:6D:F2:02:C9:65:8B:43:E9:1D:01:A5:95:96
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:32:b4:9d:ce:79:8e:ae:22:bd:c5:02:ef:73:ea:17:17:
         b6:54:6d:d6:99:96:83:8c:d0:c4:63:23:2a:65:87:cc:df:cd:
         d9:57:d7:71:02:75:d4:c9:a3:66:5c:f1:29:7f:ff:f2:8f:02:
         d5:a5:4c:e6:1a:f1:23:ab:b9:08:61:fb:7a:6a:18:bc:7c:43:
         8f:1d:21:fc:5b:3c:63:3f:c4:56:83:0c:9a:5e:e4:17:c9:31:
         72:21:51:56:9b:80:87:9d:12:63:3b:f7:d5:dd:c2:bc:e5:7b:
         e4:d7:3e:4d:87:84:27:87:1f:b7:7f:29:fe:36:f2:76:24:c4:
         58:4a:a6:a6:78:4d:5b:02:64:f6:49:c0:47:a4:bb:4c:0a:72:
         6f:03:1b:e5:ec:10:67:a2:c3:29:bc:8f:19:d1:16:8c:db:25:
         97:bf:fc:26:63:ce:60:ae:7a:a5:52:a5:91:0e:d9:0b:b5:5b:
         e7:25:f1:16:57:8f:5d:0d:6c:72:84:53:a6:81:44:90:7e:e7:
         72:c4:ce:ec:4e:68:5c:04:c3:e5:2c:1e:4a:01:f1:86:27:a9:
         cd:95:c6:86:7d:64:bb:04:a6:1a:ce:6b:68:48:5b:21:4b:20:
         2c:92:c0:6e:48:ea:aa:30:24:40:94:49:58:2b:62:05:33:7b:
         a6:b8:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----