Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File:                     _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier:          FH4+Wnm/lRGRaG7Rd3L91QppKC7tZYo5l48u5Y3E7p0=
Subject key identifier:   EB:8F:1D:BC:95:95:F3:59:02:E7:DC:C2:D7:96:FC:83:C1:7F:96:EC
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer:       /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial:       01962E61E913FE477D5AAD1478039E389935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
                          2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: Dt6jF9b95dKLrke/Yg0/mSHXzhobMjJ9/8ZaUjdPPjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:13:fe:47:7d:5a:ad:14:78:03:9e:38:99:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=eb8f1dbc9595f35902e7dcc2d796fc83c17f96ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:b5:e8:29:cd:db:a0:c0:46:d7:e2:a8:f6:
                    81:f3:fe:bc:e6:ad:12:06:3b:60:27:71:36:d8:47:
                    a7:32:98:fa:51:06:54:92:cd:00:3b:2c:dd:74:47:
                    71:04:93:0b:75:be:cb:3c:b2:c3:49:1e:0e:d2:3a:
                    cc:72:3b:6c:f4:c0:ee:3f:26:d8:ad:ef:8c:5b:70:
                    ba:1a:47:78:4c:63:5d:28:13:23:d7:22:65:6d:97:
                    35:99:b6:5a:83:fe:c6:65:10:d4:1e:62:11:87:79:
                    05:26:01:23:7f:40:3a:eb:4e:a0:12:76:b0:1c:cc:
                    ff:66:6c:02:8f:e3:16:a7:e0:51:e2:e2:3c:90:a7:
                    88:83:df:6d:ce:d0:12:1c:47:3b:ab:3e:77:76:06:
                    88:38:14:66:da:c6:bd:aa:7a:97:b5:61:bd:3b:3d:
                    63:5c:80:9b:b7:db:85:4e:3a:cf:b9:dd:9b:5a:22:
                    51:de:a9:6e:0f:4b:7b:c1:6c:62:9f:9d:eb:a1:02:
                    13:46:cf:12:eb:f2:c7:ce:a8:e2:a3:d5:5e:75:9a:
                    fd:13:b0:39:67:4e:e8:a1:d6:5b:4f:da:48:15:85:
                    ac:f4:d4:0e:73:cb:e0:7b:6e:bc:5e:7f:97:4a:2a:
                    9e:0f:cf:7a:e6:ae:60:01:c2:ab:c1:10:f2:71:08:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:1D:BC:95:95:F3:59:02:E7:DC:C2:D7:96:FC:83:C1:7F:96:EC
            X509v3 Authority Key Identifier:
                keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:18:d9:97:31:b2:9e:c9:9f:a2:d4:69:e2:8e:52:ff:2c:8f:
         a9:70:5d:57:0b:eb:f8:c6:bc:c4:97:5a:70:27:7e:c1:92:c5:
         3f:08:8b:3f:bf:0c:f3:f5:05:4f:09:68:dc:ca:f2:b4:2d:f0:
         33:b7:17:6c:73:c6:28:02:e3:f5:d0:ed:2f:41:8f:27:0d:07:
         1b:b6:ca:15:08:1a:6e:ac:ff:f2:85:f7:6f:66:83:5a:01:14:
         68:ba:30:0c:b5:ee:b0:89:bc:7f:8b:05:e7:db:75:9d:31:8a:
         1a:dd:d3:ff:da:b0:7a:b8:b3:9e:ed:31:31:81:b8:b2:83:09:
         e2:14:e0:89:e5:de:5b:de:97:c7:f8:0f:43:83:31:39:8e:85:
         1a:97:0c:62:d6:bb:a7:b4:3d:54:00:e3:a8:45:96:20:8c:18:
         b3:c4:a6:7b:30:07:b0:30:ca:9d:e1:14:de:f1:11:c0:1d:ad:
         73:ac:9b:27:58:33:74:b5:7c:15:35:dc:fc:da:16:12:7d:bf:
         87:49:f4:5a:2a:75:13:6c:19:18:40:d4:81:7e:1d:79:b0:6f:
         a0:75:3e:4c:2e:40:19:d5:7c:07:ea:ae:3e:da:53:d9:ab:a6:
         51:17:c1:bd:a6:38:15:83:f1:f5:5c:1d:f5:2e:80:05:b0:11:
         cf:d3:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----