Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File:                     _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier:          ewzULFw/B0f5eesq/wGXN2MCsQJ+i7vsE8ppajm1TOQ=
Subject key identifier:   68:24:6E:B1:77:ED:53:0F:8C:84:72:E3:81:4F:70:4C:6F:A6:A0:2C
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer:       /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial:       01962E2AFC43419761635E08701D4654492F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number:          0B80
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
                          2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: kZ+12uIqCFRVEg71oJyUy9vXlE/SlK9ICYRUiULxHkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:43:41:97:61:63:5e:08:70:1d:46:54:49:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=68246eb177ed530f8c8472e3814f704c6fa6a02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:ae:6a:76:a0:2f:a7:b5:80:b8:fc:14:fa:
                    68:60:7b:6a:c2:c9:89:60:64:9e:77:bd:d4:35:c2:
                    3e:89:9d:4f:04:00:20:25:91:7f:c8:b5:b4:f5:13:
                    22:79:d2:f3:a3:49:f9:51:ce:8c:4f:4d:34:88:c2:
                    83:83:7d:29:29:7e:fe:35:42:76:ca:60:27:b9:94:
                    11:3a:e6:4e:f2:f7:c2:04:a3:93:00:48:8f:71:0c:
                    a7:10:f6:38:00:f1:33:76:b8:49:5b:59:b4:2f:97:
                    37:a0:a4:01:08:00:2d:02:d9:29:26:84:b1:39:fe:
                    e8:02:50:4e:4c:2b:c2:ec:d6:8f:ce:65:a3:74:71:
                    b8:5c:e8:7a:6f:e7:71:30:07:b1:4f:23:13:24:8d:
                    65:3c:5c:91:46:6e:8b:ea:4d:18:76:16:70:98:43:
                    c1:ec:1f:be:7e:20:24:48:dd:2b:28:6c:d0:f6:9b:
                    3d:45:24:39:d1:14:ff:b2:17:d6:00:b3:9f:4a:fd:
                    d3:33:24:e7:38:25:33:06:f7:a7:4b:0a:e5:c2:03:
                    c0:c4:ba:b7:d4:a1:16:de:00:ea:c3:fa:f8:b3:55:
                    57:84:52:7b:f4:53:08:aa:df:c2:ce:60:55:14:17:
                    d1:c9:96:58:8c:b3:f8:90:2e:5c:54:8a:73:1d:fa:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:6E:B1:77:ED:53:0F:8C:84:72:E3:81:4F:70:4C:6F:A6:A0:2C
            X509v3 Authority Key Identifier:
                keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:6f:f9:6a:75:c4:0f:01:7c:9c:97:64:ed:5c:df:2f:dd:
         af:41:61:74:94:90:c6:0c:1c:53:fe:28:91:f8:6a:4e:1b:bf:
         73:d9:22:c5:a3:ee:ad:ad:fe:81:02:28:ad:79:87:5d:de:f7:
         2f:78:2e:66:ca:31:fb:7d:b5:03:ec:99:0b:4a:2b:70:27:65:
         8c:eb:02:5f:43:6f:c9:41:05:eb:99:3d:7c:81:f1:28:0f:21:
         8c:38:4b:ce:0b:6a:27:30:46:cb:4a:cf:94:b6:33:d5:ae:b7:
         78:37:89:8b:14:05:8e:6f:11:37:14:cb:63:c6:b0:18:0a:8c:
         71:24:16:74:48:1f:23:3b:a1:e8:f8:18:02:2d:8b:9e:2b:3f:
         d3:57:a8:6d:78:4f:f6:82:ef:50:87:cf:2b:a5:5d:69:31:f5:
         87:72:ef:1f:85:eb:ab:d9:e1:39:96:61:22:f1:e8:5a:87:f8:
         a6:ee:e2:b5:18:63:0a:62:0f:e7:b0:b0:80:ff:60:eb:53:6f:
         2b:15:99:6c:07:ae:ee:17:4e:cf:60:88:aa:bb:28:2d:7e:fa:
         7b:87:06:51:eb:46:c2:8f:eb:cc:52:25:4b:a6:01:29:aa:27:
         6c:76:80:ee:e0:66:e8:b1:fc:56:4d:bf:7d:62:23:a0:68:3b:
         fe:42:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----