Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File:                     _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier:          9SfBTtvm/FSLYoVj7munwTFj2jnNIw7c+rzsKCsqHyo=
Subject key identifier:   4C:E5:00:45:22:64:E8:5D:96:40:FD:B2:8E:29:F5:12:4A:12:C4:A3
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer:       /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial:       01962F06F9A19A2AAC79C42B756EE72B6855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number:          0832
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=)
                          2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: k5J43wXO9/zpusOWXDyERA5KFBuPYFNYRDfLvorJTIE=)
                          3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f9:a1:9a:2a:ac:79:c4:2b:75:6e:e7:2b:68:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=4ce500452264e85d9640fdb28e29f5124a12c4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:14:1b:35:5a:e9:a5:75:4f:2d:e4:9c:d2:
                    4c:c6:da:51:50:47:58:e2:28:ff:69:1b:d9:ac:96:
                    ea:85:39:d1:00:7e:6c:b9:2d:15:dc:1a:d0:cc:cd:
                    68:28:e8:15:31:af:03:77:85:52:82:4b:c3:6c:60:
                    3e:86:ba:d1:5e:60:b3:e2:99:d8:a5:55:1c:51:5c:
                    2a:5f:2f:f1:9e:8b:f4:01:3e:eb:be:2b:64:0e:39:
                    0a:67:7b:6b:8b:df:e3:e1:34:d2:c7:91:d1:58:2e:
                    7a:e5:51:ba:25:3c:ed:85:98:70:b8:fb:3b:ec:70:
                    10:09:5f:d1:52:df:eb:40:76:4c:a7:59:a4:56:4d:
                    08:86:31:06:32:01:e1:f6:13:b3:05:3a:86:e7:64:
                    34:d5:85:d9:4f:90:ae:58:64:49:28:2f:8e:61:1c:
                    1c:30:e6:32:a4:76:9e:42:94:b5:13:a6:62:e8:82:
                    99:21:d8:4e:14:d2:5c:68:10:1a:5a:2a:33:bc:b6:
                    87:55:0f:df:0c:f5:df:9f:9d:27:4e:75:82:74:a5:
                    68:38:59:7c:ff:25:5c:1a:80:3a:c2:21:07:ca:20:
                    03:40:d4:ab:1e:a5:64:ca:3d:d7:b6:4d:28:18:c4:
                    79:78:95:51:b2:7b:45:db:d0:3b:16:9a:76:23:eb:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:00:45:22:64:E8:5D:96:40:FD:B2:8E:29:F5:12:4A:12:C4:A3
            X509v3 Authority Key Identifier:
                keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:17:5b:8c:2e:1d:14:db:ac:60:7b:d3:15:9a:f8:fb:49:8e:
         fa:2f:9d:64:44:79:99:c0:08:05:98:2b:5c:2b:d4:1c:62:f6:
         8e:3f:e6:1a:b5:cd:e5:11:8e:64:13:48:42:bb:04:68:59:1d:
         bd:eb:44:99:82:fc:34:ef:c6:84:a4:b1:d8:84:0f:a7:f6:82:
         16:04:43:83:97:c8:74:b8:ee:cf:45:b9:79:63:6e:f0:f5:11:
         21:ac:7f:cd:d9:df:73:f9:7c:6f:25:fc:3a:26:cb:83:8c:fa:
         f0:14:6e:8f:55:c9:9e:20:a5:5a:e6:ca:1e:a8:c2:46:d7:03:
         bb:37:80:9f:c7:65:88:bf:a9:60:ee:9e:8f:42:9b:0e:9e:31:
         c0:4c:a6:df:06:96:7e:3e:b8:6b:c9:06:5f:8d:50:72:54:88:
         2e:ae:95:4d:06:5f:4c:78:51:8f:51:ac:8f:40:9b:97:9c:b9:
         e8:5c:b3:8d:a7:2c:17:ef:1b:08:8f:77:a4:92:4b:6b:1b:de:
         82:34:d9:f5:91:7f:e5:c1:a2:76:33:13:c8:11:ce:c3:cb:bd:
         69:7a:ca:84:4a:8e:be:69:bf:97:87:30:26:a0:a7:7f:c0:80:
         6f:9b:f7:8b:6a:1d:ff:99:59:f6:c5:fc:3e:7a:2a:95:1c:45:
         ec:6b:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----