Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          OqJ9rio5WMQmRTe+ENEI/eENLE1l2QFciQQuc3k1FL4=
Subject key identifier:   31:81:6F:37:64:06:EB:54:71:73:1E:B8:7E:CA:DA:1C:F5:FB:98:E3
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       01962F064892CFB1D7C1AB2A3C9BAF4B1742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          025A
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: EnjjIa+yop/VENHj1BytqthfMWMgkG18GBzeK7gidEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:48:92:cf:b1:d7:c1:ab:2a:3c:9b:af:4b:17:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=31816f376406eb5471731eb87ecada1cf5fb98e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:24:48:98:d1:10:7d:3f:1f:4a:ea:5a:08:
                    cc:e1:75:e0:cc:b0:ae:9d:75:60:2f:c2:d1:2f:02:
                    a5:03:fd:6e:af:ba:ef:55:cc:01:fb:e9:71:af:30:
                    5b:81:94:32:0b:04:6f:ad:4a:46:97:19:46:2c:9d:
                    60:3c:da:c8:f4:0d:71:a3:c9:ce:28:d5:6e:ae:0d:
                    16:4f:35:c0:db:8e:41:ac:10:de:fb:49:6b:47:ab:
                    e2:6b:62:76:be:07:0e:20:01:84:a6:73:06:30:8e:
                    7b:23:96:dc:d4:01:4d:23:c0:8e:ed:3a:3d:7a:23:
                    36:cd:6a:35:ce:70:9a:d9:34:d8:5f:70:50:b3:49:
                    e5:90:fe:72:56:33:d6:f6:a8:33:aa:ce:02:4b:e5:
                    5f:06:5b:7b:e1:58:0a:92:91:b5:95:83:60:e8:9a:
                    18:a7:d1:e3:94:9b:b6:ef:ae:d6:1c:9b:38:9c:68:
                    a1:59:4a:e0:68:19:eb:f8:36:51:04:6b:71:7e:f3:
                    f0:35:ca:30:45:47:4b:7a:cb:f8:2d:87:7a:ba:52:
                    65:31:69:43:4a:14:19:97:f6:18:ce:88:a2:ab:a6:
                    61:b0:35:d8:5c:32:a2:87:20:df:57:5a:a9:66:86:
                    8d:1a:89:b8:ac:59:0a:44:dd:b9:f2:0a:0f:df:a5:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:6F:37:64:06:EB:54:71:73:1E:B8:7E:CA:DA:1C:F5:FB:98:E3
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:66:c3:ce:ae:b5:c2:e4:d8:22:86:a6:f1:b2:ee:07:4c:
         6e:9a:1b:2d:e6:63:d0:fa:15:87:96:f3:9e:8a:ed:f9:13:42:
         56:d0:61:34:a8:9f:5d:f2:fc:db:7d:f3:0b:7c:08:d2:2e:86:
         c8:9b:1c:10:03:8c:36:0e:c2:b0:b2:ce:5d:86:40:0a:8e:1d:
         ca:bd:6a:de:d1:75:95:4d:a4:5c:17:88:f1:28:57:4a:38:1b:
         eb:b7:12:5d:f6:7f:0c:af:d9:a7:6a:a3:de:16:13:cd:21:e9:
         44:d1:ea:af:0e:7a:d1:25:39:98:0a:78:39:71:30:20:84:84:
         6f:58:f9:91:1c:08:c6:bb:58:62:74:d5:9d:6e:9e:87:35:0b:
         d1:5d:02:7d:dd:90:17:fb:8a:aa:56:1f:89:6e:f3:d5:b9:fb:
         5f:72:65:44:c5:f2:fa:2a:6c:35:68:6f:bb:76:de:61:2c:1c:
         11:3d:5e:45:b0:f3:a0:c0:fb:8e:a5:bc:11:49:f9:5c:ab:da:
         69:80:2a:90:8b:72:6d:6d:4f:9e:ae:29:ed:b5:5b:6e:18:ad:
         f9:06:39:a4:76:df:4a:8d:ab:55:b8:19:b6:c9:4d:e3:df:75:
         4a:ff:91:fb:57:8c:45:ae:e0:c1:27:7c:44:b7:b3:c0:a2:d9:
         79:7f:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----