Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
File:                     _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json)
Hash identifier:          eHmpBnK6J6gsaxb9/9/9L+m+Ag06BdQO7hWl0RIDLx0=
Subject key identifier:   FC:42:BC:49:01:97:C0:B8:E9:17:F0:3E:BD:2B:22:40:24:52:33:7E
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Certificate issuer:       /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial:       01962E6183880A1DDAFFDFEC866C3D49A8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
Manifest number:          119A
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: W7xL2mJNgwyyK3IwAF7aikVKcfrwjZN/yzIkdO/0prQ=)
                          2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:83:88:0a:1d:da:ff:df:ec:86:6c:3d:49:a8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=fc42bc490197c0b8e917f03ebd2b22402452337e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:01:be:99:ff:be:27:e3:8a:84:d1:08:7f:
                    20:c1:65:13:da:37:87:9e:4c:cc:6b:40:ce:08:fb:
                    b5:84:93:42:3c:3c:0e:3f:63:1a:a8:db:40:2a:59:
                    85:96:b3:99:e4:6d:b2:6a:3c:22:6a:12:90:9e:7a:
                    aa:3b:4c:86:bc:e7:d6:87:56:f3:ca:b6:ea:54:fa:
                    6b:f8:af:1a:1c:c7:e2:58:36:04:65:06:08:1e:5d:
                    79:3f:08:39:cc:27:8f:08:01:e6:16:69:0e:ef:93:
                    c3:c1:4f:d0:93:d5:0d:9d:79:e1:b7:f2:fb:57:2e:
                    b3:6e:0a:a4:27:9b:18:82:22:f0:32:49:92:52:29:
                    04:f6:f4:3e:04:2c:bf:68:ca:8a:74:62:be:8b:c8:
                    f9:c4:4e:63:69:44:99:32:13:ac:64:54:06:3d:61:
                    ad:47:58:d4:5f:d3:11:d8:9d:de:82:8b:e5:a6:50:
                    85:14:25:d5:17:37:9f:95:4b:dd:46:46:7b:46:0b:
                    92:b0:2e:ae:b1:6b:22:02:54:4f:94:26:b6:71:91:
                    88:28:e6:9f:77:09:80:61:66:70:dd:14:56:fb:da:
                    4f:c4:07:98:bc:66:ca:1e:a3:d9:70:da:9b:0f:da:
                    47:75:fd:3b:f1:a0:8f:33:87:85:15:5c:6b:92:9d:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:42:BC:49:01:97:C0:B8:E9:17:F0:3E:BD:2B:22:40:24:52:33:7E
            X509v3 Authority Key Identifier:
                keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:97:cb:fe:4d:15:2b:6a:bb:ce:9c:5a:40:cd:fb:86:50:c0:
         4c:13:5b:c4:14:7a:f0:6d:0b:35:16:82:68:fb:05:9b:72:16:
         08:6b:d5:40:68:d9:c8:fd:39:5f:69:af:a7:d2:2e:1a:70:a9:
         e2:aa:0f:cb:9a:bc:2f:09:45:39:1b:1e:f6:59:19:3d:d3:c4:
         b5:67:91:8e:37:9f:c2:e7:e8:a1:a3:eb:fa:7d:21:95:1d:f6:
         a3:41:fc:74:f5:23:58:e1:03:ca:b8:da:45:fc:36:93:c1:50:
         86:3f:d8:8c:cc:b2:99:ea:0f:76:ac:4d:b5:37:26:2d:e8:f9:
         96:4b:5b:37:5f:8f:3d:ac:c2:c0:05:da:cc:f8:6f:61:0b:69:
         ad:2e:78:2b:14:54:23:34:72:d0:58:a6:d4:e6:e3:2e:ff:5d:
         22:17:24:a3:b5:53:e1:43:b0:3c:c1:e1:9b:a2:aa:23:9c:d2:
         56:a2:5c:6f:5e:6f:30:2b:e2:61:b1:c0:fc:23:22:b0:4c:a1:
         25:8f:c7:3b:4d:5e:ed:bb:a3:6a:1d:51:e8:2d:36:81:ca:fd:
         b3:4a:12:07:96:8c:c8:fb:6c:74:dd:61:83:9e:c1:97:9c:89:
         46:08:17:1f:d6:35:0b:de:8b:a8:4c:d0:31:e4:19:cb:d3:98:
         c9:1b:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----