Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          fsj9VcTOBr29PaXZ58eRVY02ipfD64n2j94eUZJNe38=
Subject key identifier:   C1:AA:B7:76:48:F2:F2:91:10:6B:66:19:2E:12:BB:11:0F:68:D4:B3
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       01962ECF517A8AE4A7D280729EE335A8C7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
                          2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: UtPsb5G1QCHRxbec4xn9lnOd+IiqrHMVII9B/5rr6kA=)
                          3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:51:7a:8a:e4:a7:d2:80:72:9e:e3:35:a8:c7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=c1aab77648f2f291106b66192e12bb110f68d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:bc:5d:db:6f:d4:0a:bd:6d:6a:cd:17:56:
                    e7:5e:ee:62:89:15:e4:3e:36:0d:5d:41:c8:2f:8e:
                    8e:7a:5b:a8:1e:83:a2:0b:55:da:e0:c1:c4:89:67:
                    9f:19:8f:39:53:37:f2:bd:cc:7d:d1:86:3e:27:67:
                    1a:a4:4f:ce:f0:67:cd:a8:a1:0c:92:1d:2b:f6:0e:
                    71:85:3d:32:e3:e7:c2:6f:e6:07:2a:9f:3f:77:1d:
                    2f:94:82:87:b8:31:b8:4f:21:f7:36:50:79:c9:72:
                    05:d2:d1:77:33:41:15:9d:72:09:58:cb:80:67:71:
                    29:e0:77:ce:5c:94:36:92:7b:ef:1a:f8:4d:49:d2:
                    93:d3:6b:99:ee:97:75:40:42:97:23:5e:02:7b:1c:
                    c5:2e:c0:be:62:7a:a2:45:0b:7e:ae:2b:e4:06:bd:
                    92:3d:27:7e:87:74:55:57:10:48:82:6b:72:d9:ac:
                    a3:70:f7:ef:3d:07:81:4c:d3:92:5a:f0:aa:97:92:
                    57:48:18:8b:af:b4:64:a5:53:97:a8:76:a9:88:34:
                    86:d7:64:f1:ef:4e:0b:8f:d0:f0:fb:cb:31:0a:ae:
                    cc:70:af:db:68:52:81:63:20:8b:3f:82:cf:ed:2b:
                    ce:ec:c2:3d:27:df:09:63:b2:bd:43:4e:55:00:9b:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:B7:76:48:F2:F2:91:10:6B:66:19:2E:12:BB:11:0F:68:D4:B3
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:f5:4e:c7:7b:07:ee:46:98:59:0a:37:a1:d5:16:17:22:
         f9:0f:c4:18:82:5e:2e:be:e9:0a:d5:80:94:3f:76:6d:42:8a:
         65:87:47:1e:c0:d4:0a:ee:7b:68:e5:56:e0:8c:f2:8c:ba:e0:
         93:58:9d:14:cf:90:84:0a:e2:3f:f8:49:f7:a9:cd:ca:93:f8:
         02:44:f1:e3:e3:76:97:c1:48:8d:0a:1e:46:cd:d2:78:ea:8e:
         01:9e:e0:b7:d7:5a:2d:2a:c5:0d:7c:10:3a:06:e2:e5:ab:e8:
         b4:b0:32:59:77:cf:b8:e2:a0:87:2d:1b:97:f6:7f:63:d8:ae:
         48:77:e2:37:a4:78:f9:eb:e5:76:74:f4:2f:7f:a2:4f:40:e9:
         6b:eb:bf:19:ea:f6:c0:80:60:5c:a7:ff:1b:dd:db:00:08:bd:
         9e:20:41:85:64:ba:e5:c1:a7:92:a0:72:a8:0b:0a:62:f8:5d:
         e5:65:db:8a:86:7e:bb:50:6f:e9:a5:8c:5d:47:97:fb:21:6f:
         a7:c5:cd:26:85:59:dc:d7:44:2d:62:5e:78:2c:aa:21:53:07:
         f9:04:d3:03:4f:e9:a3:12:f5:29:c9:12:3e:d9:78:f3:99:b4:
         69:29:e1:8c:25:9b:82:39:00:10:8d:99:8a:6f:9f:86:0a:9c:
         24:cc:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----