Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File:                     fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier:          c3aPdjUkUvAiHPR4yLfBEM2FoC77drm80rkveoFEqak=
Subject key identifier:   43:81:E8:5D:F0:DC:C5:A5:E8:90:EE:B3:B7:4A:51:21:3B:0A:4C:9B
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer:       /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial:       01962E2AF55A6A213F137E0EDA16E9066BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number:          0749
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=)
                          2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=)
                          3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: EsuBmW/UBFMj2IsxXQNdW9yuw1Qfxb4nDJdmLZ5LvXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f5:5a:6a:21:3f:13:7e:0e:da:16:e9:06:6b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=4381e85df0dcc5a5e890eeb3b74a51213b0a4c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:c8:c7:af:f5:54:fa:c9:ff:79:6e:6f:b4:
                    63:34:08:95:1f:be:fb:e6:53:38:78:27:49:27:5f:
                    c6:6a:d9:79:56:35:bf:bd:82:59:37:e1:60:96:04:
                    60:0b:4e:63:8e:ec:09:9a:a8:bf:9a:76:c4:55:d5:
                    67:f7:90:65:77:5e:64:b2:8c:63:aa:e1:ad:e7:c8:
                    9e:84:75:14:4d:fa:83:7d:41:dd:a0:1b:6b:db:a3:
                    18:c1:59:ae:33:f7:59:a1:e0:33:43:5c:13:0e:ae:
                    d1:9d:c5:72:7d:c6:a6:9d:0b:9d:3f:1c:41:a0:83:
                    11:d5:bb:53:e5:fc:c8:a9:28:4d:3f:6c:72:2e:b6:
                    93:f9:b0:88:27:d5:a0:9f:b3:bc:36:7f:0f:b2:10:
                    6f:21:9c:dc:f4:2f:f2:09:d4:ff:e3:b0:71:80:01:
                    09:02:b2:0f:a7:30:a8:2c:f5:b3:0d:44:44:e7:3d:
                    a7:c2:a2:04:95:42:f3:a7:ea:ec:91:65:51:f6:1c:
                    e8:3f:a3:83:90:bd:10:f8:0d:5b:73:6f:b9:60:df:
                    2e:9b:1d:44:e7:39:26:a9:f9:6f:d6:72:19:f1:24:
                    51:2c:85:24:5d:2c:f4:ec:f8:db:cf:a5:c5:b6:38:
                    e5:78:e3:99:b7:c0:d3:4f:f8:c4:e8:24:c9:e2:22:
                    39:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:E8:5D:F0:DC:C5:A5:E8:90:EE:B3:B7:4A:51:21:3B:0A:4C:9B
            X509v3 Authority Key Identifier:
                keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:52:ef:fe:ad:22:ca:0a:bd:b6:71:be:2e:09:02:3e:f9:41:
         b8:81:45:10:7f:0b:32:93:cf:86:9d:03:d9:e9:eb:54:55:0d:
         28:1a:e8:27:a4:24:7f:d8:cd:b8:d7:8c:eb:f2:ba:f0:86:d3:
         2f:50:cf:c1:71:6c:43:d9:dd:e1:20:9e:33:c6:25:0b:03:dc:
         75:55:74:55:5d:17:1b:97:58:b6:0c:12:0a:b9:74:7b:42:2f:
         97:8d:43:31:44:e3:02:d0:c3:bb:ea:fd:37:82:d6:09:b4:30:
         11:1e:ec:19:03:1c:4b:5c:07:a7:b1:09:73:53:a8:4b:2f:32:
         70:b4:22:da:e4:3d:0b:8e:9a:8a:55:2c:ae:b7:7b:01:b3:c2:
         b5:b4:17:31:41:58:59:bc:93:fe:9d:95:1e:2c:b8:0e:d8:c1:
         3f:c6:5e:66:85:2f:87:e2:91:82:3f:e5:98:f2:9c:a0:b3:fb:
         f3:76:89:38:0c:9e:dc:3c:82:55:1b:c4:48:61:2d:44:0d:51:
         07:a8:2a:28:24:9b:a9:a7:51:b8:fb:04:74:bf:50:b8:91:1f:
         05:e9:28:9c:8f:91:85:7c:61:2f:75:89:39:f0:a2:0a:26:d6:
         ea:88:9d:b2:6d:19:cc:21:8d:69:0e:c8:07:33:19:2a:15:9e:
         6f:de:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----