Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
File:                     fYx0FDwic-IBpnVxVDHfryj-F7I.mft (raw, json)
Hash identifier:          BQBvMLS27OIjxr5H4WMmwVlwIltuTxz7TkH2DAVf0qs=
Subject key identifier:   B3:EF:05:E5:12:7E:77:75:A1:C6:06:AC:AF:CF:C4:A7:16:EC:71:A2
Authority key identifier: 7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2
Certificate issuer:       /CN=7d8c74143c2273e201a675715431dfaf28fe17b2
Certificate serial:       01962DF3FB093536B507AD8CF51132B45F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft
Manifest number:          0974
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: Xrjs-S2RSbrZu3yjzq9Uz6FE53U.roa (hash: BOs1xZvMppiPo1LljXNukiOUbDIO0taZ6bkmR9k5vfQ=)
                          2: fYx0FDwic-IBpnVxVDHfryj-F7I.crl (hash: tshFUNprkRo/P0B4pCPQYOfpzHbpLPY4nKOSU/yiaHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:09:35:36:b5:07:ad:8c:f5:11:32:b4:5f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8c74143c2273e201a675715431dfaf28fe17b2
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=b3ef05e5127e7775a1c606acafcfc4a716ec71a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:f1:5e:aa:98:94:a3:e7:7e:1e:23:a0:09:
                    cd:cd:16:3c:5a:ca:6a:bf:c5:b5:7e:5f:a5:33:d3:
                    aa:0f:b6:e6:c6:ca:28:3f:f7:f5:9b:b9:6e:80:c3:
                    a1:db:5f:7a:1b:6d:45:a1:2e:a3:7a:4f:cf:8b:72:
                    8f:e0:43:6b:d4:41:a4:bf:07:0a:fb:7f:ee:0d:0a:
                    b3:25:e3:b0:e0:8d:a8:df:3e:a1:d8:9b:be:0f:53:
                    af:86:cd:c4:85:1e:ab:59:90:41:83:62:22:a0:9b:
                    35:c6:36:1d:ea:40:36:f5:51:4b:83:39:dd:cd:b1:
                    51:f3:f0:e5:50:77:34:0f:70:f3:b8:c4:26:2f:81:
                    fa:3c:8e:7e:89:47:db:fb:fd:cf:d4:22:5c:84:51:
                    e1:28:08:26:41:83:45:f1:1f:e3:4d:1f:4a:da:c3:
                    30:6e:86:06:3f:5a:b5:a3:48:a3:2e:c1:0e:a7:a2:
                    82:c0:ee:33:4b:96:cb:49:58:2d:78:5c:10:67:1c:
                    0a:35:5f:53:41:8c:07:ca:a5:f0:ba:7b:a5:b9:a5:
                    95:b9:ac:6e:53:86:ef:ee:93:dc:f6:8a:71:a0:fb:
                    97:87:f5:0a:26:65:71:d4:fe:0b:e0:ab:54:b6:03:
                    6b:e5:e5:83:11:f5:42:bd:02:60:e1:ea:80:d0:cc:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EF:05:E5:12:7E:77:75:A1:C6:06:AC:AF:CF:C4:A7:16:EC:71:A2
            X509v3 Authority Key Identifier:
                keyid:7D:8C:74:14:3C:22:73:E2:01:A6:75:71:54:31:DF:AF:28:FE:17:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYx0FDwic-IBpnVxVDHfryj-F7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5c3a4c-9843-4bec-a162-18c0365307bf/1/fYx0FDwic-IBpnVxVDHfryj-F7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:df:3c:d3:56:87:38:d5:01:ae:43:3b:27:c4:14:6e:37:06:
         99:8f:32:15:27:06:82:8d:bb:2d:de:af:2a:dc:b6:29:1c:34:
         b3:2d:06:c6:00:2a:f9:ec:96:3d:db:03:ee:db:48:72:77:71:
         a8:2e:e0:b5:fb:1b:18:52:f9:b9:af:59:7e:95:d0:e3:e7:f7:
         02:06:a3:81:33:5f:35:c5:b8:a2:02:92:e1:a2:b4:b6:56:87:
         99:d8:a2:1f:eb:a9:94:ea:a7:ce:c2:87:c7:2e:58:37:2a:55:
         c7:54:96:91:83:e2:d5:6e:d0:4b:7c:11:25:1b:ed:65:6e:54:
         fb:67:e0:6f:ab:c4:f3:ab:0d:e1:a6:50:c9:8e:98:5a:1c:9f:
         8a:83:79:e3:ba:40:f5:a0:68:07:d4:fb:f9:05:af:f6:d9:d0:
         4a:d5:58:64:34:30:e9:91:c1:f3:6b:ca:2f:bd:a4:7d:c7:8d:
         dd:3b:f4:9e:2b:f1:8d:84:1a:11:f5:cd:e3:48:44:52:fb:14:
         d2:51:58:03:14:00:6c:cc:51:27:50:8f:f8:9b:12:fa:17:6b:
         18:39:5f:b4:58:73:62:88:b8:bc:7b:fc:d9:5d:ad:93:b1:91:
         49:9d:d5:c2:79:43:c3:f2:fa:b6:c1:a0:48:cc:36:76:bc:14:
         d6:be:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----