Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
File:                     1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft (raw, json)
Hash identifier:          1jGspzXf7hb8inBc/na4doWHIiPMWxYtJiD6CpvbooA=
Subject key identifier:   46:95:86:24:B8:A3:C3:5C:61:60:32:6E:00:95:21:47:79:0D:65:88
Authority key identifier: FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF
Certificate issuer:       /CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
Certificate serial:       01962FAB4172DC2DD3CD11AEB8349EA72EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft
Manifest number:          1008
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl (hash: 9hVwVIk46bNpY3Y5eRQ8Yk9gXOIPEWyjVo/Ox5cic2A=)
                          2: VEF9YiqqrEYAf4QojwGm_HltJ2A.roa (hash: ME+nwVXcRmQ2bX2iI/VGtdmmf4+22BDBuD7jDy4oOiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:72:dc:2d:d3:cd:11:ae:b8:34:9e:a7:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb0301ef6ff5897b5be2c941ddb51978fd489ff
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=46958624b8a3c35c6160326e00952147790d6588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:e1:f2:9c:69:d2:ca:2b:53:47:7f:95:19:
                    a4:2a:70:58:ea:c9:a3:b2:a0:5d:bf:88:9e:d1:ad:
                    d9:35:46:0d:ef:02:cd:36:35:97:73:c6:73:45:b5:
                    22:b9:52:ae:5b:ef:2d:1b:9b:5d:9e:5b:69:79:67:
                    de:b1:a9:03:94:9e:7b:f9:65:d3:72:23:ad:92:8e:
                    6f:77:30:31:33:ff:7c:42:93:d4:50:3d:f5:bb:10:
                    cb:2c:96:f6:4b:c4:37:90:de:48:a8:e0:44:30:e6:
                    a6:58:ce:22:0f:34:98:29:ca:12:b7:6d:69:5a:05:
                    50:4d:b2:44:b0:da:52:e6:47:85:1b:f2:6d:aa:c4:
                    79:45:0d:42:51:6c:c3:88:0d:a8:0f:52:85:8a:9d:
                    7e:76:a6:f7:c5:f3:7b:d6:18:c3:a2:59:5a:73:89:
                    fe:42:80:e8:db:3f:80:a9:63:f9:8a:e8:55:79:1f:
                    01:6e:0f:b6:e3:fc:6b:5a:99:88:2d:59:38:d9:73:
                    d3:fb:c8:87:04:c2:c6:29:63:c6:cc:c1:33:5f:96:
                    71:f9:54:b4:94:db:37:cd:4d:18:f3:fa:37:21:1d:
                    b2:20:c9:f3:d3:bd:73:55:9e:fe:bd:2a:7d:7b:1b:
                    cb:b7:f1:f3:65:a1:63:26:40:11:17:54:a6:3e:f1:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:95:86:24:B8:A3:C3:5C:61:60:32:6E:00:95:21:47:79:0D:65:88
            X509v3 Authority Key Identifier:
                keyid:FB:B0:30:1E:F6:FF:58:97:B5:BE:2C:94:1D:DB:51:97:8F:D4:89:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7AwHvb_WJe1viyUHdtRl4_Uif8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/405d9b-1073-4cd7-90eb-e8f60cab1866/1/1-7AwHvb_WJe1viyUHdtRl4_Uif8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:83:a2:7c:6e:a0:31:2e:00:96:e5:56:aa:97:ec:48:a3:66:
         04:66:f6:d6:06:07:b3:23:ae:4f:f7:1b:3c:3e:7d:67:53:24:
         fc:22:f4:8b:4d:c9:52:c4:f9:ca:c4:17:4e:89:07:5e:5e:5d:
         f5:88:2c:28:c8:46:49:5b:9c:b6:39:65:eb:2a:ce:c2:d6:50:
         f5:80:f9:60:ad:38:db:df:a1:07:ff:d5:cd:97:0a:e8:ab:2e:
         6c:bf:8a:12:36:2a:de:04:1a:df:97:28:5f:cb:7c:df:00:e7:
         f3:3d:e1:fd:e3:80:88:05:e7:8f:ce:ce:bf:bc:40:89:79:0b:
         81:4c:b0:1a:a2:bb:3f:eb:2d:26:ea:21:4a:b4:08:90:a6:3e:
         bd:d0:d7:71:33:95:56:06:2f:c8:bb:38:b1:07:d1:d0:a6:ed:
         37:9a:0e:38:a7:04:1d:dd:00:2b:48:7b:45:ed:ad:4e:a9:1a:
         6f:8c:8b:1d:a6:61:50:6a:a5:69:22:a1:5c:2d:b4:77:61:76:
         f6:a9:9f:a2:7c:aa:03:c5:e9:10:6d:d2:5c:2d:b5:47:b4:48:
         96:f7:4c:d5:b1:41:88:64:d3:70:fb:72:7b:77:de:88:3f:ec:
         3d:6c:0a:2c:77:5b:af:53:74:40:9a:38:09:15:7a:64:2a:74:
         3e:e5:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----