Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File:                     1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier:          rMT5l6mPjlOR000Den/l0sKOdwEjwVC38DagxaawtY0=
Subject key identifier:   62:F9:7C:8A:8E:64:F2:A8:F4:15:A1:D4:5D:0F:B8:A5:E0:A3:B3:FC
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer:       /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial:       01962FAB1AAD931AECD641637D2AEAA0075E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number:          081A
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: k5kIYwnJxER1vBbZ+dxQJzzA6a7Uq3Oddu4rr64dFZM=)
                          2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
                          3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:ad:93:1a:ec:d6:41:63:7d:2a:ea:a0:07:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=62f97c8a8e64f2a8f415a1d45d0fb8a5e0a3b3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:90:a0:03:4f:b6:52:a0:96:ea:42:1d:e3:
                    6b:00:15:73:de:8b:a0:31:ab:21:77:b2:c5:64:60:
                    f9:16:9b:c3:1f:c6:70:0d:9b:23:4d:16:90:61:b9:
                    ec:b2:30:ad:ce:f2:e6:cf:98:8c:65:a9:00:7b:aa:
                    11:af:6b:f2:0d:75:98:4b:ce:19:c3:64:a2:24:ca:
                    a3:49:a7:94:9c:69:d1:19:df:81:13:21:9c:88:39:
                    ab:19:b0:76:48:ca:57:c3:19:89:4b:6b:af:55:c9:
                    c5:2f:f0:63:26:52:0b:7f:1e:be:59:ff:b0:98:a9:
                    da:f7:2d:67:85:10:81:95:d4:3c:03:ee:b8:23:fe:
                    36:bc:25:58:12:2a:ee:d1:bc:e8:0e:95:a6:1a:3a:
                    4d:ae:63:b4:a7:9c:d9:67:e0:de:78:a4:7c:4b:a1:
                    e9:62:87:d4:f1:ba:9f:d8:36:61:ba:c7:d5:bc:9d:
                    31:e6:4f:24:5d:eb:a5:24:61:bd:c7:b7:4b:ae:1e:
                    3c:97:04:c8:fd:84:c7:03:92:9f:ed:c9:71:08:9e:
                    4b:31:e3:5d:71:0d:47:e9:0e:3b:fb:c7:a8:c8:fa:
                    51:cf:d7:ef:9f:52:44:4a:97:82:ce:1f:10:aa:50:
                    3a:bd:56:fe:8e:f4:22:1e:e4:77:85:25:ff:6a:b0:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F9:7C:8A:8E:64:F2:A8:F4:15:A1:D4:5D:0F:B8:A5:E0:A3:B3:FC
            X509v3 Authority Key Identifier:
                keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ca:4c:22:74:3e:2a:3d:21:c0:22:16:53:a9:03:bb:04:8e:
         31:f4:3b:50:b0:be:9f:71:fe:b1:5e:0b:e0:d0:6d:43:9b:d5:
         8c:01:5f:a8:58:bf:d8:93:29:fe:ff:4f:22:e0:75:23:39:2e:
         d2:ca:64:2b:3d:3b:3b:4a:d5:39:84:69:e4:15:87:96:9a:b6:
         c5:ad:be:df:7e:cd:af:cc:be:3e:78:86:61:78:9a:66:51:44:
         4c:2c:2f:e6:bb:3b:a0:e0:e2:9b:c6:2b:11:0e:21:30:2c:49:
         01:b2:f3:9d:b8:e9:7a:aa:a3:3c:52:06:71:a7:a9:ab:0a:54:
         da:30:ce:8b:26:19:4e:2b:c1:95:fb:ac:74:87:b1:86:e1:d0:
         86:42:5a:64:01:40:9c:68:69:42:7a:84:69:22:84:fe:0b:9c:
         1c:25:e7:a8:04:34:34:44:05:82:5e:27:8b:86:e9:c3:90:9a:
         39:da:73:24:5b:a0:eb:b3:18:bb:d2:5e:70:34:e3:4c:95:44:
         fa:82:49:c0:63:50:68:26:27:ac:93:8f:54:32:9d:11:b3:ee:
         85:53:14:b9:76:5d:30:d4:c6:4c:6f:87:86:f4:97:3e:33:d0:
         e4:9e:ef:28:13:e0:b7:f8:72:b6:64:b5:cb:85:14:88:fb:f8:
         b1:55:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----