Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          1vw2kF9yZ7PJRKUaTInXX0RTR5jbqdQK3jojMiIh5Sw=
Subject key identifier:   A9:0B:F7:6E:A6:2E:A8:A2:5C:1C:97:70:FB:C4:71:E0:57:F9:9B:8B
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01962E2B07CC1BC2E4A96619813535785167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
                          2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
                          3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
                          4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
                          5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: p5Z9st79bO0jinslOTLuwuFD79hyiDeFKw8XHABJGng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:07:cc:1b:c2:e4:a9:66:19:81:35:35:78:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=a90bf76ea62ea8a25c1c9770fbc471e057f99b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:f9:a6:1c:7d:ef:7e:0d:17:fe:fb:92:41:
                    1a:68:3b:af:1f:a6:a3:ef:9c:de:82:f5:20:5a:1e:
                    9b:7b:0a:3f:d0:93:0f:d6:f5:98:9a:9b:a9:1d:cf:
                    31:2e:36:16:bd:23:cc:a4:13:73:08:3f:55:2e:e4:
                    02:29:79:1b:be:bb:63:bf:26:e2:25:45:ff:64:97:
                    c3:95:14:7b:0b:68:00:fc:3e:50:33:d6:c2:8b:b4:
                    ab:1b:86:26:d0:87:4e:34:ec:39:70:4c:7c:38:ea:
                    78:63:bc:4a:32:8b:03:51:bb:57:35:40:06:3a:e8:
                    92:50:ee:61:34:07:eb:33:65:6c:e1:fd:a5:8f:5f:
                    69:48:7e:45:ed:fb:6b:bb:55:5e:42:b6:87:25:71:
                    c9:fa:20:27:de:43:c0:8b:a0:2a:c4:3f:98:21:27:
                    5c:ed:64:44:10:c8:ef:1d:e0:9f:64:cb:1e:54:50:
                    55:cc:00:be:dd:a9:d8:95:86:49:0e:1f:6f:b2:97:
                    1a:86:4b:ca:04:09:f8:d6:a2:05:63:70:38:1b:7d:
                    52:e6:13:e5:51:0b:1c:5b:58:ef:48:40:c1:80:b7:
                    b1:ab:fd:b5:5a:b3:c2:46:a9:d1:30:a5:29:e4:c3:
                    df:fb:5a:6e:5f:cb:40:6c:ee:58:69:01:e2:85:04:
                    5a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:F7:6E:A6:2E:A8:A2:5C:1C:97:70:FB:C4:71:E0:57:F9:9B:8B
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:21:9c:b7:a2:dc:8c:36:e0:f5:f0:d0:1e:d4:79:a0:a5:0d:
         20:72:85:fe:ac:15:82:f1:e0:c4:46:31:1e:91:73:f6:b1:26:
         9a:f2:5f:d3:c4:47:d9:ce:68:dc:69:8f:05:b9:13:7d:2a:17:
         0c:3c:fd:23:04:94:7e:df:27:dc:c4:ac:bc:74:08:25:62:53:
         81:9d:49:2e:72:bf:db:d1:a4:4e:bc:64:8f:6e:f0:a0:64:0e:
         35:00:32:11:0f:90:4e:dd:96:fd:99:2e:da:4b:5f:b8:93:08:
         68:83:61:10:89:99:dc:af:07:30:ef:48:d2:4d:67:8c:96:10:
         74:39:de:2e:28:f7:96:80:ce:bb:05:c9:49:5d:85:ad:c3:03:
         c7:40:48:6e:e5:32:11:ea:2b:e2:d7:35:3a:25:f1:df:7d:48:
         52:19:62:66:fd:b9:dc:f6:e3:95:ef:d1:e2:8a:e1:4b:f4:b5:
         49:d9:56:c2:56:5a:97:44:94:2c:8a:43:a4:a6:42:69:18:57:
         26:d2:04:8b:2a:df:e7:90:df:c6:56:8c:9a:21:bd:58:86:ad:
         a9:05:3b:33:2e:25:3d:45:46:d9:14:02:4c:7a:1b:60:63:c6:
         89:bb:66:97:a1:e5:f0:9f:b0:13:64:80:d5:b6:1a:2b:bd:94:
         a8:4e:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----