Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
File:                     FTD76iUBSVl304gVrTwnCCbwY6A.mft (raw, json)
Hash identifier:          fL/N6NhjiPf4p5j1m5olAVcbEIf5IQ/he+cKclBYXQQ=
Subject key identifier:   F0:6F:BA:52:A5:BB:2D:C1:04:6E:DE:5E:B6:C4:03:F7:0E:71:2D:F2
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Certificate issuer:       /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial:       01962F74DBD94509E2D56FE0413B6043F980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: FTD76iUBSVl304gVrTwnCCbwY6A.crl (hash: aSJyxyowDAUEMp45+KxrSwp/Y9zqD/9OOc+Wd3mUCeo=)
                          2: rADueZxFQHJbIbrjKeYeAXGGBpc.roa (hash: qtSN6Vm03JzTJBZ5ewdm444W/Qon6bt3NPDuYq9sI8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:d9:45:09:e2:d5:6f:e0:41:3b:60:43:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=f06fba52a5bb2dc1046ede5eb6c403f70e712df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:6a:a6:58:f2:75:fa:96:41:58:b1:94:17:
                    94:38:43:b0:bc:7f:e6:63:60:9e:f1:3c:ed:d8:08:
                    ec:10:f3:99:f2:06:b8:a2:47:fe:69:5a:3b:be:7a:
                    5d:7e:4b:14:58:52:b0:36:79:a9:6f:4b:fd:f6:df:
                    d0:dc:d1:04:0b:c4:f6:80:8a:fd:f3:ef:d3:2b:86:
                    77:62:76:39:7b:b9:2b:18:b6:57:01:2e:ae:ae:ff:
                    29:1b:b3:ca:95:c7:c9:51:38:6f:27:5b:d4:74:3f:
                    c5:0e:a0:95:42:06:86:bd:69:2f:45:1b:7f:6f:d8:
                    25:60:dc:43:5c:1c:72:02:f6:88:a0:aa:22:ba:b0:
                    31:4c:ec:70:fd:c2:76:a0:6c:1d:32:fe:4a:6e:38:
                    4f:a5:f8:6e:65:b4:80:b5:dd:dc:6e:21:a5:a0:74:
                    d9:b7:17:80:36:ad:a8:84:50:eb:cd:56:b0:50:9c:
                    51:80:ec:0f:33:65:ee:bc:77:ce:5a:84:8a:75:e2:
                    fc:f3:eb:a4:04:d6:97:d9:98:06:53:64:79:3a:01:
                    e4:99:4f:5e:c5:f4:94:1d:5b:0c:e3:71:b4:f7:ae:
                    61:23:ec:ac:e7:d7:88:f7:ed:88:53:9c:1d:34:bc:
                    5b:47:00:c5:81:bc:bd:50:a1:69:2e:56:41:44:14:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:BA:52:A5:BB:2D:C1:04:6E:DE:5E:B6:C4:03:F7:0E:71:2D:F2
            X509v3 Authority Key Identifier:
                keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e8:d9:ee:fd:57:04:0c:d1:99:82:cc:a8:46:8c:99:1d:2f:
         c2:7e:67:17:a5:e4:60:fd:0a:bb:02:1d:f0:6a:82:69:60:f5:
         4f:9d:c8:86:ed:37:29:fd:53:67:63:c8:6d:7c:96:e8:b2:a4:
         74:d4:5d:87:90:36:5e:58:85:a5:a8:87:b8:50:ce:bc:89:fa:
         b2:cb:7c:88:90:dc:64:cd:1c:6b:a2:35:50:63:38:9d:52:c9:
         c1:84:54:48:9c:ad:69:ef:4c:bf:9e:19:bd:61:2f:df:5f:e8:
         15:ae:e0:1f:9a:1f:41:6e:ed:80:94:8c:25:1e:03:32:04:f1:
         cc:f4:8a:0b:3e:c6:96:e1:ae:95:84:17:37:a3:b7:93:b1:d4:
         c6:dd:7e:01:7a:73:34:78:62:66:85:6d:6b:32:89:cc:9b:4a:
         bd:21:b7:cb:9d:bf:2d:e2:ca:49:40:5c:df:1d:9e:fb:88:6a:
         11:b1:b5:97:07:55:cd:80:1d:e5:05:c1:01:39:f5:d4:f2:ae:
         dc:14:5c:51:91:5c:68:ca:dc:8a:cd:71:dd:c5:ee:66:85:37:
         06:92:0b:39:14:35:80:16:fb:ab:a5:6c:29:8a:58:c8:6c:5f:
         1c:3b:12:d1:0c:b8:6b:d9:d6:33:de:0b:02:dc:55:83:2e:de:
         b9:7c:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----