Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File:                     fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier:          Vfn7waVamsD9niJ1bNI0KcJuybrwCMTxqRgynh3ZdSU=
Subject key identifier:   FF:7D:98:2F:12:2C:D2:5C:A3:99:03:B4:22:E0:9E:E9:A3:1A:42:09
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       01962DF3D3C23274EB9D4F4CFF2A777BC2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number:          0834
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
                          2: JiDLUAEWCf0QMkfngpohCbhKNuQ.roa (hash: g9GotTDpZgVRPRfg5qW5M4wBYQLWFDrkzBNLKf+GOCs=)
                          3: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: fJ0HfTuzx3LnJBT2ylwjxP8mBaW3IPUFSldRfavcZcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d3:c2:32:74:eb:9d:4f:4c:ff:2a:77:7b:c2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=ff7d982f122cd25ca39903b422e09ee9a31a4209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:e8:7d:ca:e6:4c:9f:bf:d8:95:13:2c:44:
                    82:be:65:62:28:ee:dc:dc:98:cc:a7:44:22:9d:48:
                    fd:7b:01:35:e2:23:72:43:c1:92:88:77:50:eb:34:
                    29:c3:54:86:18:ac:bf:dd:c0:e0:e7:93:06:0d:c5:
                    bb:00:d1:f9:d2:e2:6b:9f:97:c9:72:ae:0e:ec:6a:
                    84:ab:4d:e4:c7:db:4c:ab:52:74:6f:08:1f:cb:7f:
                    1e:a0:5a:28:f1:0c:4a:2d:42:16:63:e2:0e:4b:7d:
                    e0:3a:91:e5:7e:cf:58:c2:eb:a0:47:7a:83:6b:59:
                    7c:6a:9b:5d:16:92:0a:88:6b:c4:cd:9e:7f:98:46:
                    c1:89:09:8c:51:4d:6a:73:0f:1b:d8:2e:43:9d:9f:
                    23:1e:5c:b7:86:50:32:8b:d0:4e:02:a7:99:f8:ff:
                    44:eb:8f:ae:d2:01:b8:79:d0:59:00:ad:92:25:e7:
                    bf:9f:a1:36:f6:14:cf:e6:4d:ef:7a:30:41:51:59:
                    b3:32:22:14:39:71:ea:56:8b:dc:5c:06:43:7a:a7:
                    d5:7a:d0:2f:c9:91:c0:82:db:f9:3d:2e:56:a0:6c:
                    7c:12:af:04:dc:f6:12:20:28:09:e8:03:5a:06:dc:
                    d6:ef:8d:69:31:01:96:a7:74:a1:79:70:66:5a:27:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7D:98:2F:12:2C:D2:5C:A3:99:03:B4:22:E0:9E:E9:A3:1A:42:09
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:5f:2b:b4:65:72:ad:9a:53:07:41:2a:30:5c:69:99:85:
         03:a5:ed:fe:e1:6d:9b:08:0e:f5:55:04:ad:f5:00:fd:c6:fa:
         30:4a:f5:da:c6:3b:bb:1a:d3:bb:3b:e9:eb:7a:1d:ee:96:d8:
         34:f7:80:8b:fe:ed:31:cf:f5:2e:ea:db:65:d2:05:37:6d:9a:
         12:d2:a3:b7:ed:a5:08:0c:11:e2:b6:e3:e5:b8:87:b1:fc:c6:
         26:70:a5:1d:a6:fb:38:40:3f:8b:d3:12:9b:c0:8b:9e:ad:81:
         66:0e:63:c6:16:78:25:e7:2b:a0:2b:eb:bc:2f:c0:30:21:38:
         ed:a3:d7:fd:7f:4c:d4:5d:20:d7:8b:6f:79:97:d8:5c:cc:97:
         8a:07:c9:93:9d:52:e9:f2:ba:13:b7:10:91:d1:f9:86:de:8f:
         44:8c:02:60:6f:1c:bd:9a:45:30:bc:54:b5:0e:ef:43:cb:fb:
         55:fc:5c:0a:39:8f:02:d6:97:8e:15:1b:5d:5c:08:2b:43:8b:
         00:8c:7f:c9:47:bf:7b:1b:3f:88:13:b8:ec:75:c2:5a:ef:0f:
         65:2a:5b:dc:3f:7c:17:e2:d6:07:f4:ed:ce:48:36:f2:40:78:
         18:70:91:63:3f:c2:bb:52:56:3f:c2:fb:f3:8f:43:46:c1:cf:
         b2:a4:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----