Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
File:                     fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json)
Hash identifier:          Cx4LGKYBloQ6TM8qhM/N91gTNElNNVa7gkV1l8OaqhI=
Subject key identifier:   4A:08:12:DA:48:5E:AC:55:F1:34:C3:0A:1B:BD:37:B0:9E:A0:11:8C
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Certificate issuer:       /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial:       01962FAB2D70EB927F84590FED455F8AFC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft
Manifest number:          14A2
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=)
                          2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=)
                          3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: QYDsAxR1NpfdlaHbvXrD9VqSKD592W+M4NEI1iNfD7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2d:70:eb:92:7f:84:59:0f:ed:45:5f:8a:fc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=4a0812da485eac55f134c30a1bbd37b09ea0118c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:9b:3b:6a:b7:40:7b:d7:02:76:07:d3:40:
                    fb:61:3d:02:73:e0:6f:09:64:62:74:9c:32:cd:65:
                    6d:aa:95:cb:c6:f7:ce:4b:cc:1b:44:0e:b2:7b:74:
                    b1:45:74:a4:3f:69:ec:d5:70:9f:65:5d:79:b3:44:
                    55:4a:29:54:1a:f3:49:7e:24:b4:de:4d:d7:b6:25:
                    c9:53:ae:9d:65:f1:cd:db:cf:59:9c:a6:82:f4:e5:
                    29:9f:0d:d4:f0:cf:a9:15:83:76:00:47:84:16:1c:
                    8a:91:3b:f4:ca:71:55:ba:96:41:38:65:3d:3a:0a:
                    28:e3:8b:7c:2d:61:09:ee:53:1c:72:91:41:76:c1:
                    bd:3c:ef:83:01:03:d4:4a:fc:7c:43:88:94:6c:ed:
                    fb:d4:4a:41:32:e6:06:a8:78:52:46:fd:43:81:1e:
                    1b:1a:5e:64:b8:f1:28:64:3c:9d:e3:79:dd:b9:10:
                    54:0d:f4:ec:72:44:35:51:85:21:68:b3:0b:a1:7c:
                    39:e5:9d:5d:6d:c5:67:59:f1:1f:a8:e4:2d:6e:e3:
                    7b:7a:6c:19:b4:2d:3c:31:bd:3f:db:5e:15:35:1b:
                    a5:58:66:3e:45:d3:bc:f6:ee:00:3d:eb:96:43:5d:
                    fb:13:e3:f2:ac:d0:de:3f:8e:42:ac:b6:40:ef:a0:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:08:12:DA:48:5E:AC:55:F1:34:C3:0A:1B:BD:37:B0:9E:A0:11:8C
            X509v3 Authority Key Identifier:
                keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:90:10:bc:a6:74:3d:f1:22:9c:45:33:ac:73:f5:dc:f4:a8:
         30:27:3c:d0:0b:0f:65:e0:cb:24:5b:b6:b8:c7:5a:91:37:9d:
         c2:1e:d7:bd:3d:5a:56:c8:9f:be:25:c2:02:4a:c0:d3:3a:01:
         7e:fb:05:92:d9:a5:d7:94:12:e7:4c:88:c1:c7:a1:a4:db:7e:
         17:1d:49:9b:1e:69:de:ac:07:64:34:fa:a9:32:27:8b:d1:8c:
         0e:16:8f:ea:65:96:c6:88:09:99:f0:70:24:f0:fa:16:5f:7f:
         77:a9:d7:28:6a:a9:a6:f4:af:d0:93:cf:19:10:84:8f:3c:92:
         ce:c9:b6:b9:55:18:aa:8b:ad:3f:06:fa:fc:28:8f:e4:c7:df:
         61:9b:98:b8:6b:30:86:79:f6:f3:6a:fe:d1:80:cc:cf:e3:54:
         d3:b7:88:ef:ce:bc:76:39:36:4c:97:86:fc:72:f6:1d:be:23:
         71:a6:0a:d6:1e:0b:bf:5d:e6:2c:b9:94:58:11:48:b1:ab:cb:
         b8:6c:2c:8a:d8:f9:c9:7b:ee:ba:f7:9f:dc:ff:cb:c3:a4:f0:
         0f:2a:97:28:8c:c7:62:30:07:0a:57:19:95:4b:29:4a:63:0f:
         f9:b1:e3:0c:a7:d3:80:4e:ca:5d:40:a8:8a:88:16:36:ec:de:
         a1:70:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----