Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          PlF6tQdnw4jVNYcvUDedZtle6nK8Tn7bpG3SAycuag0=
Subject key identifier:   F8:A8:77:30:56:70:D7:E8:E8:1B:E2:84:E1:5B:2F:34:53:7C:36:6C
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       01962F07356E80124406F4C60188BC41F4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          05FC
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=)
                          2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: Vi1YC2a+9EImdBZAILLvul8En5rJ4A1wWKFUwRqsIoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:6e:80:12:44:06:f4:c6:01:88:bc:41:f4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=f8a877305670d7e8e81be284e15b2f34537c366c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:38:19:0a:07:37:87:dc:df:d8:c4:00:b3:
                    b5:02:1d:e1:95:0b:f0:e4:70:37:cd:16:07:30:58:
                    a5:a0:7b:1b:69:89:c4:a4:13:3e:03:65:08:73:33:
                    9e:54:ce:36:ff:35:c0:52:35:5e:3f:97:4b:e9:28:
                    b2:57:55:70:6a:d3:ac:e9:29:0d:31:4d:fd:cf:3f:
                    90:ab:46:02:14:cd:4b:51:5b:9c:74:4b:31:95:41:
                    fb:00:91:5d:78:a9:20:98:d6:c7:10:1a:47:96:9e:
                    2f:44:e6:f4:f8:3a:ea:c5:27:68:46:9c:b5:bc:8a:
                    dd:9c:91:20:2d:9a:9e:e6:30:b2:50:92:ce:f2:bf:
                    9a:25:d3:c7:67:41:1b:6c:d2:0c:89:7a:9f:1e:8c:
                    de:53:cc:8d:12:7a:31:9d:31:10:89:b6:45:8e:07:
                    f3:86:15:96:09:b0:b3:5c:cf:f4:5f:ed:a2:83:ab:
                    83:d2:dc:e4:c3:77:a6:b2:70:12:f7:bf:ed:45:eb:
                    20:e4:47:9d:f6:a4:9e:62:0b:e5:0b:4f:e3:46:80:
                    59:7e:c8:cc:81:07:3d:6a:37:4d:84:77:70:ea:51:
                    a3:59:64:d5:f6:65:70:a2:26:f9:85:39:6e:6d:2c:
                    96:65:04:0c:a6:ba:6e:7e:f5:1e:1b:2d:57:e5:fa:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A8:77:30:56:70:D7:E8:E8:1B:E2:84:E1:5B:2F:34:53:7C:36:6C
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:d7:f6:e3:3f:3e:5c:50:cf:9c:18:d7:de:8e:bb:4d:88:
         85:c6:95:af:f2:50:f2:7f:4c:83:46:09:0d:b2:8d:79:b8:34:
         1a:ed:53:90:47:1f:5e:73:4c:c6:d9:2f:b8:f4:7d:76:91:dc:
         9c:d3:55:0c:62:b3:63:51:ff:4a:fd:de:4d:b0:d6:93:45:c8:
         7b:c9:5a:87:0b:82:49:f7:b8:34:6b:73:cf:18:5a:96:b3:78:
         06:d8:9e:28:e7:15:fd:db:0a:c3:7a:84:cf:e4:30:50:f3:1f:
         5c:ef:e5:03:5c:8f:30:ea:b3:00:47:70:a1:98:f4:46:24:57:
         da:e8:f7:64:03:d2:35:00:d7:8b:35:2e:23:c0:28:e6:79:80:
         9b:47:fe:60:db:41:06:27:ac:22:08:d5:b2:85:95:1d:a3:44:
         4e:51:60:c1:5f:65:40:44:7d:f4:66:46:ea:67:4e:f8:ab:eb:
         0e:bf:75:e1:83:04:1a:d0:d6:89:35:d0:f3:75:1d:50:78:7c:
         d5:08:e7:71:b1:1c:8e:9e:af:47:43:54:4a:a4:ee:b9:c2:46:
         f9:82:d1:0c:e7:86:c0:f3:66:83:b0:b8:76:53:80:62:47:80:
         80:95:da:07:8f:d6:54:3b:56:b5:b1:ca:d1:2d:ca:68:f4:0b:
         77:f2:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----