Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File:                     FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier:          0KspRwL3h7egXBNYB1AM5kaJseeXNFkx9Or89RljzYs=
Subject key identifier:   3C:6A:5F:A9:79:32:91:39:4E:21:E0:77:6C:E4:8D:4F:D4:77:0A:57
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer:       /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial:       01962F74756E0CE72C175CFB73AABA494800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number:          0D13
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: hlwfnW5sTQB2DRBSjOLvMfv+Pwp+2iAJHwD5N2vJhxo=)
                          2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:75:6e:0c:e7:2c:17:5c:fb:73:aa:ba:49:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=3c6a5fa9793291394e21e0776ce48d4fd4770a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:99:1c:32:29:da:d4:ce:25:ff:14:e7:b8:
                    77:93:78:3a:2c:83:67:2f:de:b4:e4:81:fa:ae:97:
                    ba:22:53:1d:c2:c5:df:1c:75:97:66:99:d9:29:ea:
                    2a:83:eb:89:39:cf:5c:fe:7a:98:d2:54:3e:49:c4:
                    74:97:33:8b:b7:53:b6:ef:2b:75:e3:9c:49:e7:44:
                    f1:42:e5:88:50:60:ee:3b:af:bc:d3:d2:ac:65:9a:
                    44:8e:b6:45:20:a6:cd:a5:b3:d9:43:a0:99:6a:fe:
                    d0:52:84:fa:48:ee:79:ce:48:46:06:29:03:33:c6:
                    df:27:ac:9e:e3:35:9d:b3:55:ca:be:3e:34:f1:0b:
                    b8:f0:c1:6f:43:16:05:2e:60:d3:fe:1d:a2:42:35:
                    3e:d9:b8:e6:41:26:c9:d2:71:51:05:3a:0a:33:0b:
                    73:5c:81:6b:8a:0d:4d:61:20:35:86:f5:7f:fc:78:
                    80:32:1d:4e:49:16:7c:45:44:6f:1e:2b:b7:26:27:
                    b6:57:26:d0:e0:e4:73:17:74:3f:af:0d:4f:43:bc:
                    6c:89:af:35:c9:ae:69:a9:0b:6d:59:6d:4d:24:bc:
                    9d:1a:4e:cd:9d:c1:86:f2:09:af:87:24:7a:3f:1b:
                    f2:c8:6b:c5:b8:70:4c:b0:f9:76:f6:1b:c3:5b:a7:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:5F:A9:79:32:91:39:4E:21:E0:77:6C:E4:8D:4F:D4:77:0A:57
            X509v3 Authority Key Identifier:
                keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:56:b1:68:fb:fc:b0:a1:4b:b3:69:79:57:07:33:e9:66:
         88:3f:e1:03:b6:94:a2:91:2b:2c:26:99:06:8e:a2:ae:ff:9c:
         07:b7:ec:74:36:2c:da:7f:40:a0:21:2d:d1:93:ea:64:93:00:
         24:b9:c2:26:1b:fe:01:d8:0a:d1:42:37:61:99:96:7a:73:fd:
         d1:c7:df:e7:7c:a3:f0:9a:97:a0:00:70:58:30:c2:14:e7:6d:
         5e:cb:01:88:50:25:ad:e6:da:ce:81:90:0b:3c:d0:36:ec:38:
         11:f8:14:f2:b5:de:7d:29:af:72:4b:ef:97:54:1a:ab:e7:c8:
         0b:bf:3d:e5:1a:70:cb:bc:64:2f:0e:c0:4f:59:6e:ca:4c:28:
         11:23:8e:f8:31:bd:f1:ed:86:1e:d2:d4:bc:4b:f7:13:eb:bb:
         05:9a:13:55:ff:85:e0:a0:da:88:f8:48:39:2a:34:d3:2d:13:
         38:95:ea:38:60:da:31:ae:97:c1:9d:d1:c5:37:b6:b9:fe:f3:
         b5:0d:2b:fd:96:c0:80:b6:ca:e6:8d:c3:c7:66:1d:e9:8b:ba:
         48:5e:8c:36:ff:46:68:29:81:e9:58:4d:d6:81:2b:cd:45:25:
         91:69:34:98:94:32:6e:ef:f0:74:35:2b:e9:cd:41:ce:81:06:
         3d:13:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----