Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File:                     fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier:          /MRtz2gNUbajHbmjBaSQqgiHCFLiL4+0mFjMb19BuHw=
Subject key identifier:   43:D5:E7:1E:D9:32:C9:CC:A1:38:9B:87:B4:8B:1D:FA:55:FE:2D:49
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       01962FAB553F465BA695D2AD7F3DA8428C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number:          03A9
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
                          2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: Wtyz/D9MuIh//vMjFnw372ej1J2G5lOdnx/vGurmo80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:3f:46:5b:a6:95:d2:ad:7f:3d:a8:42:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=43d5e71ed932c9cca1389b87b48b1dfa55fe2d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:85:30:03:a5:62:15:f1:20:0a:37:6a:c3:
                    c5:dc:6f:b7:dd:89:bd:17:68:16:d8:ce:55:75:44:
                    81:d4:0a:90:c9:15:bf:1b:7b:d8:30:25:24:0d:58:
                    95:3d:4a:ef:a9:f4:e2:0f:f9:9f:33:d0:d5:60:23:
                    9c:43:3a:f5:b9:b1:92:23:f1:b0:dd:c6:67:6e:2e:
                    01:78:4e:c4:39:cf:f5:93:81:62:17:9c:2b:86:04:
                    ee:1a:23:d1:c9:06:d8:91:ee:93:10:fa:60:6c:b9:
                    95:57:cd:3f:15:01:2d:f5:f1:db:45:93:10:5d:5a:
                    04:69:f5:ff:f1:74:3b:e9:f8:9d:e8:44:83:14:0c:
                    25:48:5e:60:a4:4e:bd:cd:69:32:b9:d8:38:98:65:
                    6f:b4:29:e0:b3:2e:4c:ed:6c:e2:e7:0d:8d:cc:ed:
                    cb:3f:83:d4:5c:3e:c4:6a:23:7e:e5:af:b1:23:63:
                    99:8d:2f:6e:cb:b7:ed:16:3a:04:93:f8:68:1e:7d:
                    4c:af:ad:0c:a3:7d:d9:5e:93:77:a3:61:40:a9:5b:
                    01:18:e1:6b:d3:e4:86:0a:4b:de:97:ad:33:41:e5:
                    9f:06:be:e3:7c:11:40:47:7a:ee:0b:b1:3c:03:7a:
                    be:d3:fa:e9:46:fe:2f:98:ee:44:f5:ef:cf:db:93:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D5:E7:1E:D9:32:C9:CC:A1:38:9B:87:B4:8B:1D:FA:55:FE:2D:49
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:19:6b:de:86:28:e8:26:29:7d:b7:a0:8c:08:d7:ff:0a:ca:
         09:25:3d:b7:9d:d7:52:ed:27:e1:bd:a1:f4:80:93:2e:60:a4:
         76:2e:42:a0:0c:83:f4:bf:85:5c:00:af:f9:c2:93:1b:c2:0f:
         1f:52:3a:c8:c0:62:29:8b:d6:72:01:2b:12:78:23:1f:54:92:
         74:6f:2c:88:a6:bd:c8:b8:61:8e:b9:5c:bf:31:87:ac:d0:dd:
         54:e2:d8:85:45:97:29:e2:1e:d4:98:cc:50:bd:70:27:90:2c:
         69:14:d9:2d:1a:39:53:2d:1d:a7:9f:fb:d9:d5:34:32:6e:a4:
         d9:ec:51:a0:a5:d4:6e:85:84:c9:bd:0f:c0:37:7e:ab:89:fd:
         8e:12:9c:53:5c:b6:1c:94:e4:42:8c:72:85:c3:67:18:81:6a:
         55:15:6a:4d:42:7d:3e:7d:a4:c4:83:46:6f:23:31:1d:24:ba:
         e9:7a:08:14:d1:1d:17:eb:bb:ec:ff:92:cd:fc:cd:be:d6:db:
         46:9d:a1:20:be:db:18:ee:79:c6:31:40:17:6b:d9:8c:6d:6a:
         34:6d:03:90:ca:70:ba:d5:e4:59:d8:ad:45:5d:1c:41:11:45:
         30:7c:ef:82:59:4a:c0:57:21:6e:79:73:b0:ad:e2:8e:cf:b6:
         0b:63:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----