Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File:                     1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier:          TBEr+grMxyVm6FvnDS2gzDcwR1oehKgXnoYPsQ3twzM=
Subject key identifier:   3C:22:8B:44:62:73:7A:CC:50:F4:CF:EC:82:B5:31:77:6C:F0:F5:77
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer:       /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial:       01962ECFBCF6B835127B79DF0397D17ACC78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number:          0F0C
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: jAlhpy4lOeRspYHpa2UO1xb+UgmnbnqxIYeC/IZIGk0=)
                          2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bc:f6:b8:35:12:7b:79:df:03:97:d1:7a:cc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=3c228b4462737acc50f4cfec82b531776cf0f577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:72:7b:be:1e:71:2d:24:3f:81:e4:fb:a5:
                    46:83:5f:60:aa:37:ac:f3:02:92:bd:06:1f:4a:bc:
                    10:ac:c9:96:c8:c8:7f:42:2d:ee:09:c5:95:75:26:
                    f3:a2:33:63:3b:e3:96:09:be:4d:a4:db:52:1f:b1:
                    ad:2a:da:59:20:fb:18:90:7a:be:ec:7c:d0:5f:6c:
                    15:82:ce:fd:a2:4b:b1:c9:5a:a1:25:8b:b5:17:b1:
                    e5:f6:d8:80:44:30:e1:74:73:ee:b1:e2:e3:82:de:
                    6a:93:62:da:15:59:c8:00:26:72:34:b4:1d:bd:54:
                    57:75:a9:f8:ab:b0:fc:b8:fc:18:15:fe:42:68:98:
                    53:6c:4b:b8:9e:cc:3f:4f:63:83:5e:66:44:aa:34:
                    ca:bf:d9:e0:71:3e:8b:2d:4f:4b:21:d8:2b:81:6f:
                    86:96:c3:16:d7:50:0b:5b:f8:57:55:96:1b:c9:d4:
                    fc:4a:f6:5b:48:e8:e5:fa:de:64:29:2c:f8:6b:05:
                    59:39:db:12:b5:df:ec:9b:66:d0:eb:29:59:59:0a:
                    c7:d2:c8:51:88:23:e8:d2:36:68:f1:22:d7:78:9a:
                    e1:c5:9e:36:c5:7c:cd:cc:b2:00:7b:e4:21:c0:e5:
                    f2:78:c4:29:82:36:aa:bc:19:2c:01:3d:ea:c4:9d:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:8B:44:62:73:7A:CC:50:F4:CF:EC:82:B5:31:77:6C:F0:F5:77
            X509v3 Authority Key Identifier:
                keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:24:5a:b6:4d:63:76:89:c2:41:fe:52:ef:11:d9:98:c1:e3:
         97:29:45:68:4f:d7:3f:62:e7:71:60:00:de:b5:b5:36:89:a8:
         7d:ba:4e:7f:92:81:33:3c:11:1e:ba:bf:38:65:ee:fd:6f:66:
         96:95:56:1d:ef:81:b7:11:17:94:df:78:a4:7b:ba:64:07:f8:
         08:44:d1:39:d1:a0:35:1c:aa:0e:c2:6b:d8:a7:8b:8a:26:d6:
         c8:37:4d:33:83:ce:00:d5:db:67:00:63:17:ba:7b:1b:f6:56:
         22:2a:43:3c:7e:ae:87:76:57:a9:21:10:bc:a8:fc:28:99:0d:
         69:7f:68:11:7c:be:5f:f2:b3:b8:54:42:ad:30:77:f1:e0:a1:
         74:73:26:86:2b:d8:67:af:dc:c8:29:a7:bc:ef:ef:f3:3c:2b:
         ac:11:b9:f1:81:4f:29:a5:cb:ee:ae:ca:f1:14:7c:0d:52:a5:
         12:59:8b:7b:16:e8:a4:fb:8f:81:16:39:99:78:8d:b3:f2:56:
         29:ec:91:bc:5f:fa:ca:85:cd:e0:26:df:ea:b4:d3:23:a5:8b:
         49:b5:d6:69:6c:a8:bc:32:a2:c0:00:ee:5c:49:55:b6:7d:69:
         f2:3f:2e:a5:1e:95:9c:01:73:2f:b0:27:a5:47:d1:ed:1b:fa:
         76:65:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----