Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
File:                     _PU0Avp2-gY3bN6mvNOV4YAHnbc.mft (raw, json)
Hash identifier:          XWQP/v2eLEsKXvRr2oYQVw6q5O8o0gaRpiSKG9wpOBs=
Subject key identifier:   7F:2A:7C:A5:04:54:A6:E3:0E:A5:D6:96:6C:D1:FF:36:CB:B7:5F:D8
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Certificate issuer:       /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial:       01962F3DBB4F94F4C13925722239FF669B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft
Manifest number:          11F9
Signing time:             Sun 13 Apr 2025 13:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:36 +0000
Files and hashes:         1: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (hash: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=)
                          2: _PU0Avp2-gY3bN6mvNOV4YAHnbc.crl (hash: tSPmyXtIwaFl4+XVKJatpFaAfprZ4ArvRHkgDBah0aw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bb:4f:94:f4:c1:39:25:72:22:39:ff:66:9b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
        Validity
            Not Before: Apr 13 13:01:36 2025 GMT
            Not After : Apr 14 13:01:36 2025 GMT
        Subject: CN=7f2a7ca50454a6e30ea5d6966cd1ff36cbb75fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:9c:15:14:a5:07:fc:8b:20:71:ad:bf:d7:
                    e4:b4:f4:53:f6:98:c7:52:1c:36:7c:a3:14:e7:43:
                    49:46:28:21:59:d2:6e:dd:41:9d:72:ea:e1:43:39:
                    73:86:22:86:ca:d7:52:7d:98:d0:c6:c9:6e:ac:b8:
                    59:99:ea:50:72:88:8b:0d:4a:c1:21:73:4a:a7:01:
                    00:52:f4:b0:8f:1b:ae:2c:68:8b:3d:32:ba:a9:da:
                    e5:41:f7:df:90:ec:bb:ec:64:6d:03:cf:ca:45:48:
                    86:0d:ba:9a:44:98:05:f6:92:fd:59:3e:e9:95:9d:
                    59:46:6a:a2:24:e4:1a:40:57:5f:42:36:d4:84:55:
                    08:23:a6:e7:a3:fd:bd:cb:95:eb:ca:c2:85:a5:01:
                    d5:35:b3:11:b0:f8:fe:11:df:de:e0:0d:f6:aa:a7:
                    77:6e:42:a8:a8:6c:a5:bc:cc:2d:23:f9:03:e9:6f:
                    3c:75:8d:d8:9a:45:6e:eb:d8:72:d6:58:4a:7e:e5:
                    d5:f7:1f:84:6f:be:17:ae:93:ac:fb:0e:45:4d:eb:
                    bb:c5:b4:c7:fc:b1:0b:c4:ae:c1:e3:e1:69:47:4a:
                    e4:77:73:22:8b:c8:a5:f7:af:b1:29:cc:0b:f8:7a:
                    e3:75:62:a2:d8:49:a0:f0:a0:ae:13:2e:a8:01:55:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:7C:A5:04:54:A6:E3:0E:A5:D6:96:6C:D1:FF:36:CB:B7:5F:D8
            X509v3 Authority Key Identifier:
                keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:df:d3:38:b6:52:23:4c:6c:e0:ce:7e:a0:ae:34:0c:b3:
         c9:c5:31:f9:6b:47:a3:5a:8e:0a:c6:a1:17:cd:9e:57:e9:81:
         90:e7:d6:f3:97:c6:e1:67:97:54:15:41:89:67:6d:2f:2e:06:
         02:b2:99:ba:d7:21:44:39:c2:cc:cb:c0:9d:8b:52:9b:f4:3b:
         e2:ef:99:60:a5:85:d2:5d:54:71:68:6d:d5:12:1d:66:24:d4:
         9e:ef:10:05:14:b6:a9:a5:b6:4b:9a:de:e3:ef:47:a0:6b:ea:
         4c:a0:2b:1a:a5:f4:e3:45:e5:28:7c:9e:d7:0a:bd:d1:63:fe:
         d0:29:7d:a0:c7:da:eb:e6:f8:35:3d:80:e8:d5:11:59:44:b3:
         3a:02:57:9e:a7:88:a3:8f:29:53:fc:cb:3f:8f:23:82:10:0d:
         82:87:8f:19:7d:98:05:ff:3c:e7:9b:31:4f:8d:71:84:99:ac:
         67:81:01:6e:a6:dd:b2:4b:1c:bf:18:91:a3:9a:f7:6c:c2:3a:
         78:9f:9e:65:c9:e4:6e:41:29:bc:56:4c:39:29:75:cd:a9:1b:
         90:fb:6d:6b:e8:df:26:39:03:41:8d:8c:42:2f:f2:66:9e:0c:
         65:37:73:63:b3:d9:73:d9:0a:2e:5e:dd:0c:ac:cb:64:c3:21:
         d4:cf:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----