Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File:                     f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier:          X97QY1UAuANI5RAiBFVks3RBED52JFz2mdC5rozeOLI=
Subject key identifier:   F5:88:87:85:FE:46:C5:3F:FC:1D:3B:69:B1:2A:A3:87:91:F9:9C:CB
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer:       /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial:       01962F073E30200372336E743C318D3C9A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number:          09F3
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
                          2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: mQ9mHPFAMLGIeCnTDUTuEWPk1Q4DrCEBWsCog5mZ3gE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:30:20:03:72:33:6e:74:3c:31:8d:3c:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=f5888785fe46c53ffc1d3b69b12aa38791f99ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:57:60:5c:d5:29:ab:d9:a3:7e:c7:31:df:
                    31:f7:51:25:1e:7f:08:0a:92:41:af:27:32:89:6b:
                    56:82:27:e2:bc:42:69:54:31:49:a1:a5:7c:cb:ea:
                    67:4d:5b:be:cb:81:ef:19:44:ed:15:9b:78:c3:06:
                    74:46:ca:6c:79:d7:a1:eb:17:84:61:9e:cd:67:ae:
                    e3:d1:22:db:d5:9e:ab:03:2b:3f:24:be:82:08:e3:
                    e0:ff:27:9c:42:7d:bf:63:5c:bf:00:b4:c8:ff:11:
                    b6:7e:11:4a:5a:41:7f:d5:f3:e0:52:6d:fa:4e:a4:
                    0c:c8:7c:b7:8d:5a:40:6a:09:eb:0b:8b:3b:99:c9:
                    37:2d:72:da:16:72:2d:15:4f:bb:01:98:c4:d7:ae:
                    7e:07:69:55:30:fa:da:12:07:68:d5:3f:92:c3:64:
                    ff:65:6c:28:d5:02:cf:ca:d3:be:36:8d:f8:5f:f9:
                    ed:51:d3:53:f7:a9:d6:c0:bd:5e:8e:56:57:07:19:
                    c0:f8:91:d1:20:13:6a:42:6b:71:d7:47:d5:b8:1c:
                    87:85:f8:fe:f4:27:62:bd:94:2b:4b:90:46:56:fa:
                    e0:f5:71:ce:9f:b2:48:08:7c:13:85:af:ff:d9:ed:
                    30:e3:19:4a:d3:dd:cd:50:e0:2a:21:c5:79:6b:ae:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:88:87:85:FE:46:C5:3F:FC:1D:3B:69:B1:2A:A3:87:91:F9:9C:CB
            X509v3 Authority Key Identifier:
                keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:02:44:a1:09:dc:96:ed:ac:32:07:1a:71:c5:65:c5:dd:7c:
         03:33:2f:37:82:19:7f:d4:4a:a8:29:aa:b6:8d:ee:a7:83:a4:
         00:bc:75:4a:a6:79:f9:b9:a8:58:49:a7:20:97:e0:9b:4d:13:
         a9:4e:13:eb:40:33:88:27:52:59:84:11:e9:06:c2:a0:94:7d:
         4a:aa:a8:c1:f4:50:e4:c1:d2:66:05:3f:8f:43:82:6c:09:34:
         c6:56:f9:a7:84:c8:3a:69:81:e9:6f:81:36:7d:4e:e1:8f:68:
         71:66:6f:79:8d:c7:b9:a2:2d:68:7c:85:c3:68:00:49:ab:3c:
         2a:e9:f0:20:86:d8:a0:c3:93:f3:98:3f:05:6c:44:38:42:9d:
         d0:25:ea:86:41:c7:30:85:25:38:34:39:bd:55:62:0c:c1:c4:
         fa:1e:2d:a8:b0:7e:ec:dc:0e:13:14:df:a0:7b:59:27:e0:27:
         c7:7a:52:b5:a3:47:36:e5:98:44:4b:73:21:4d:04:e9:e6:81:
         d3:c0:73:ea:21:23:f0:d1:86:f5:70:ee:67:27:71:71:1d:32:
         e3:07:64:d5:65:b8:7f:ff:db:2a:7c:af:e9:7a:5e:24:a9:42:
         75:23:a0:9c:40:d9:30:93:d7:80:e0:d9:c8:55:30:1c:9e:05:
         5b:c4:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----