Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
File:                     F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json)
Hash identifier:          CmGR0utUzXniQYJcfTCSsL5E1yuQR77o9+gpU549ROA=
Subject key identifier:   8C:51:29:C4:5D:82:9F:99:E3:0A:29:E6:E2:6F:7B:B0:0A:48:2A:B9
Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B
Certificate issuer:       /CN=17e568417f59a21129fb2487f5e57bc171631f7b
Certificate serial:       01962ECFA906AB9D5DB0F7059D3AB454BAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: 1OXMQm7zT3dZ8HhahOeLzOF7/92vrwer3yf+HuzW6zg=)
                          2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a9:06:ab:9d:5d:b0:f7:05:9d:3a:b4:54:ba:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=8c5129c45d829f99e30a29e6e26f7bb00a482ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:b5:18:68:05:21:36:67:86:0f:4e:4d:eb:
                    33:cf:96:4b:0b:68:11:0f:56:d5:6a:1c:9c:9e:d3:
                    ed:fd:d3:f5:b4:53:b5:c3:2d:09:95:87:d3:77:c2:
                    89:de:9d:de:b2:4c:1f:18:7b:38:3c:d4:cc:43:70:
                    a2:01:37:ce:cd:87:b9:f8:7c:27:ae:e2:f9:3b:f8:
                    c6:a4:56:a1:ce:39:44:55:c0:6a:d6:57:63:ac:c7:
                    ff:b7:bc:11:79:a8:9a:01:cd:07:b2:ef:b4:4f:49:
                    15:c1:9e:c6:d0:a1:37:88:2f:4c:d2:8e:7a:2c:c8:
                    87:7f:f7:82:1f:2c:d1:4f:57:46:0a:42:fd:63:e4:
                    20:77:96:68:7d:4d:87:2d:98:fa:80:35:07:62:0a:
                    54:0f:88:f8:17:e4:7d:af:fe:ec:94:c5:77:73:35:
                    45:5a:a8:99:ff:51:46:25:f1:0d:6a:6a:68:ab:3f:
                    4d:9d:70:0f:2a:e7:ba:ea:c7:3a:51:26:3a:59:9b:
                    ad:70:2f:32:2c:5b:4d:aa:25:3b:37:4a:68:d1:ad:
                    05:f5:28:13:d9:e8:f1:71:cf:5f:7a:31:13:9f:c9:
                    de:2c:44:84:e5:07:f4:90:37:32:a1:22:09:73:b0:
                    34:bb:8c:03:25:d8:80:07:24:a0:20:ba:80:6c:30:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:29:C4:5D:82:9F:99:E3:0A:29:E6:E2:6F:7B:B0:0A:48:2A:B9
            X509v3 Authority Key Identifier:
                keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:34:be:18:fb:63:21:d3:00:80:b7:c6:7c:4f:f3:af:0a:2d:
         dd:17:f4:81:36:22:47:ab:fd:50:ed:bd:ec:75:e3:d0:ca:08:
         ba:f9:f7:05:53:39:fd:68:0d:7b:34:aa:a6:9b:6e:f2:7c:46:
         3b:06:f0:f0:13:34:de:e5:e8:c6:6f:f8:0d:1a:c4:61:3e:32:
         d3:34:4b:c4:f7:4d:1c:8c:60:1b:52:e1:a4:d3:86:ac:a1:1b:
         69:a0:70:72:f5:09:a1:97:00:b1:17:4c:99:90:ba:83:2e:25:
         fb:c7:f5:64:92:0e:31:de:ec:79:32:6a:02:36:e4:25:67:54:
         d1:10:62:37:50:36:7d:41:bb:16:6b:1f:6b:94:d9:c0:7a:8c:
         3a:37:fb:fa:0c:b8:3d:6e:d4:2c:f0:fa:5f:73:6e:71:a3:36:
         b2:e5:dc:4c:95:fc:4f:f8:7c:8b:36:3b:1e:69:41:af:74:ed:
         60:2e:c8:fb:b4:8d:b7:e3:ff:ad:89:98:12:8b:b5:84:72:11:
         db:3d:af:75:e3:a7:26:61:3a:4b:ac:02:be:54:71:b9:b6:c5:
         c1:bd:81:74:fa:53:2a:34:82:c5:a2:74:01:a6:6b:df:21:02:
         15:4c:8f:6d:aa:5c:7f:3d:59:26:34:e7:d5:05:c4:64:08:01:
         40:26:e8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----