Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          Y0qTiToDtd/qp/rxV/XnzMfInNa/eFE1al5vJ3QL5oo=
Subject key identifier:   79:42:7B:00:2D:01:13:CD:D6:26:6D:35:84:1E:87:36:88:32:E3:22
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       01962DF3BB4D5C9EC96F18E44D402CC0E5F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          07B8
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: 7dxlMX86pmyN6B6PZWWvNeSS2192+K/HX+K9BMGmYXo=)
                          2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:4d:5c:9e:c9:6f:18:e4:4d:40:2c:c0:e5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=79427b002d0113cdd6266d35841e87368832e322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:8a:ca:70:1a:cd:20:d9:e6:f4:9f:80:09:
                    74:35:bc:c0:aa:52:e3:c1:29:51:4d:2c:38:01:d7:
                    3b:c6:3c:e4:9c:20:e7:7f:6c:ec:9b:a1:65:15:8d:
                    51:ce:7b:50:cb:92:de:81:18:82:ad:04:b0:fd:00:
                    d7:d9:54:58:fa:28:9e:63:5b:bc:b9:4a:ac:76:92:
                    6c:d4:94:ce:64:2b:83:1d:fe:72:11:d1:87:69:6d:
                    5c:34:7b:e8:16:ef:7c:14:86:da:7a:55:fd:a6:03:
                    92:78:88:3a:82:80:c3:29:50:b1:74:82:4b:44:b2:
                    68:50:5f:3e:d6:4c:90:59:d4:d1:38:e4:97:f4:10:
                    a4:62:e9:9c:bb:4e:0e:25:b2:f8:85:45:54:f6:91:
                    ee:e9:db:fc:46:6e:a6:93:17:83:76:de:02:be:47:
                    57:38:8a:78:3a:fa:01:fd:5d:3b:8c:c8:75:36:01:
                    46:d8:1a:a0:4a:0f:4c:e0:33:05:27:cf:ef:29:00:
                    7b:2e:da:4c:96:65:4c:43:76:b7:f1:16:e2:b0:fd:
                    82:2c:9d:08:65:f7:f5:10:77:ce:df:1b:ab:f7:ac:
                    61:82:99:ad:d8:0c:18:7f:53:ea:0d:34:a3:18:e2:
                    25:e8:d1:f6:db:84:9f:f3:21:3e:eb:d4:08:11:56:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:7B:00:2D:01:13:CD:D6:26:6D:35:84:1E:87:36:88:32:E3:22
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:04:71:f9:6e:a3:a9:60:eb:d4:47:e0:fe:97:7e:8a:b2:
         de:43:e3:c8:a4:fb:24:d6:07:85:60:bf:f6:9e:8f:41:73:d8:
         9f:c4:15:12:63:06:2d:e4:63:e4:24:be:98:0e:07:d0:d5:22:
         56:e0:df:b5:df:e2:ed:3c:7f:ce:15:90:2a:cf:5b:20:63:42:
         b2:e8:37:57:73:5f:8a:ed:d6:8b:79:16:41:27:0a:84:1a:26:
         5a:57:d8:c5:b1:53:47:bf:17:3a:d4:e3:5a:0f:cc:90:22:51:
         f2:9e:29:ab:fa:02:1c:18:2c:0b:02:d3:2f:1c:fc:4e:fd:38:
         84:33:16:4f:02:07:12:2e:3b:8d:49:9f:89:0c:30:5c:19:e6:
         19:83:3b:b8:3b:f7:92:e2:10:67:2f:2b:f7:d1:f0:88:f6:f2:
         c1:49:6c:56:26:ac:d7:82:2b:75:c6:b9:6b:13:ea:28:96:be:
         b7:9c:a9:cf:7d:f7:35:0a:af:d2:a1:d9:5a:02:9d:81:a5:18:
         7b:3d:6a:7d:b1:f3:ff:55:8c:d8:89:47:bf:5a:1d:f2:37:ab:
         d4:e3:91:8e:6c:1f:90:92:1c:9d:75:ba:a7:9a:89:e2:95:ad:
         85:12:f8:0a:8c:be:4a:c6:8c:cb:ba:4d:52:76:90:b7:b2:4a:
         bf:2d:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----