Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          Som9M8BuO7C4rKNaTkz04mM31UlEjAZAcRcxjjFAzao=
Subject key identifier:   F2:9C:02:00:72:0C:7E:A0:2E:E7:5D:CA:F6:10:F1:9A:A9:26:46:E9
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       01962E61DC734C283C0848FD68B90735AAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: SpkdakB2OdIuVE348-y165owlz0.roa (hash: BnmPz2hkeMhPxWlEoJOTembsWZqO80f/J+3uznzMlq8=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: 1u0jibtt6l2H0h2lKmDfv30b0l/IfzXJk+THPwDSoAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:73:4c:28:3c:08:48:fd:68:b9:07:35:aa:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=f29c0200720c7ea02ee75dcaf610f19aa92646e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:9b:d1:a8:69:9b:d2:69:0d:0d:c8:34:7a:
                    f3:f0:2e:82:24:9b:69:94:2e:04:14:c7:62:b8:63:
                    e1:fa:dd:1a:05:f6:3c:32:2b:03:dd:89:df:fb:65:
                    c3:29:00:3e:a3:34:75:7b:26:73:31:54:10:ef:7f:
                    b6:51:1f:3e:31:eb:fd:84:36:01:8e:69:74:0a:2c:
                    ef:fe:d6:b8:1d:b9:73:5f:35:48:5c:9d:b7:9f:0a:
                    f5:72:ca:39:05:d3:11:2e:17:e9:b0:43:56:94:f1:
                    4a:86:24:48:5e:a9:fe:7e:5b:d7:86:51:e8:19:e3:
                    44:16:18:1a:e3:78:92:4a:2d:53:b2:aa:5c:a9:e3:
                    48:e3:b9:1b:2d:44:82:69:84:31:f8:6e:7d:d3:8f:
                    bb:dc:66:00:d9:47:54:42:e1:ff:c9:e1:7e:84:e0:
                    27:da:eb:56:07:94:c2:a9:c7:8d:99:3b:39:25:86:
                    fb:e6:f9:25:94:90:b9:d1:f3:03:38:34:93:e4:ad:
                    73:9b:00:3d:17:5e:e7:b7:a3:a2:40:8f:d2:2b:5d:
                    48:87:00:28:76:cc:05:18:96:fe:a8:a0:77:bd:61:
                    26:44:93:b0:d7:74:25:1f:1c:aa:2f:04:69:6a:56:
                    18:b7:c8:42:01:7f:fa:2d:2d:a5:eb:66:0c:7d:c0:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:02:00:72:0C:7E:A0:2E:E7:5D:CA:F6:10:F1:9A:A9:26:46:E9
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:19:91:55:c6:1f:41:b0:30:02:38:e0:58:75:a1:27:08:
         1a:db:dd:eb:59:08:a5:ea:5c:b8:a9:f7:30:9c:8b:af:9f:64:
         79:de:db:50:f3:96:58:dd:de:96:a4:9b:b2:2d:86:8e:c2:18:
         3f:57:3b:d9:0a:65:65:83:29:35:55:d9:56:92:94:59:9d:1a:
         b4:1b:90:d6:28:1b:a4:97:11:e4:57:75:c6:07:c0:83:d2:8b:
         8b:97:af:a0:27:38:23:fb:aa:f4:b1:f0:b1:2d:79:01:70:bd:
         72:bb:99:a3:81:a1:93:f9:9e:08:52:c6:d7:5b:3f:01:38:1e:
         1c:95:84:4e:73:40:6c:22:2c:84:fe:53:ee:69:59:27:d0:5c:
         14:53:89:1a:5a:16:b8:f3:c1:4a:ae:d9:8c:bf:4b:3c:a2:f6:
         8c:0b:58:3f:03:fb:64:77:88:64:36:a9:9b:df:12:36:16:8d:
         fc:2f:7a:bb:6b:6b:2b:cd:89:57:c2:8c:db:75:4a:39:f6:9d:
         82:d1:90:c2:41:30:f3:7b:10:d8:26:c6:d5:c0:5b:67:61:80:
         42:6e:bf:91:78:4b:0e:ff:c2:74:a4:4c:b2:69:84:43:1e:d9:
         65:63:bf:d0:89:cb:b1:30:e1:be:4e:d8:4e:f2:b0:b7:71:ee:
         2c:19:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----