Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          3CiqjkRl9U7OzYUJBNbcsu6NUB5x+39P1Nsjz8260U0=
Subject key identifier:   BE:76:E8:CD:95:C1:93:29:71:3C:A0:FD:42:0D:7A:8F:12:82:21:F3
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       01962F747E7FBA928C13628C82AC792FEF4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: 2AKh0eLV9dWb0E4Sk7WuqyE6UMFux4VY9YURlVdh2Kc=)
                          2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=)
                          3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=)
                          4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=)
                          5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=)
                          6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7e:7f:ba:92:8c:13:62:8c:82:ac:79:2f:ef:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=be76e8cd95c19329713ca0fd420d7a8f128221f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:a4:95:a4:ce:d8:15:38:fa:4a:5f:22:72:
                    a5:9f:63:ce:7f:05:22:a3:93:6d:9b:20:c3:e2:c6:
                    a8:09:20:5f:3e:7c:47:2b:6c:d3:45:ad:f0:52:53:
                    63:bc:9b:6b:95:3e:0f:52:ee:2c:28:4d:6e:f3:24:
                    b5:d1:69:15:dc:ef:ea:65:1a:9e:5c:b5:d4:8b:05:
                    13:45:4a:69:9d:2a:3c:d0:8b:d7:91:5a:bb:d0:3a:
                    8c:94:f1:ce:fb:2c:24:1c:c0:0a:71:e7:81:07:c3:
                    55:e6:73:7c:17:10:b8:69:04:32:8f:4d:52:72:e5:
                    cc:b4:24:43:bd:3f:93:6c:42:7a:0b:5f:a5:89:90:
                    29:54:6d:76:28:26:f9:65:73:5c:78:aa:77:cd:cb:
                    3c:28:7b:fc:89:d3:05:34:2d:84:08:71:8f:2b:32:
                    a2:fd:fd:f6:ff:a4:76:d6:c6:24:34:b8:4c:78:a6:
                    3f:4e:c0:d7:2a:1a:7b:3f:0f:8a:91:51:34:e2:cc:
                    2f:6d:16:c7:74:0d:25:df:11:f3:8e:2e:8a:c5:83:
                    5b:9b:66:30:f7:00:ed:78:5b:22:6b:60:6c:8b:b0:
                    cf:75:3b:f2:7e:d6:fe:2c:27:cc:8c:ee:f5:70:22:
                    94:e1:b9:05:4a:79:1e:c4:7e:62:c4:09:84:e2:a8:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:E8:CD:95:C1:93:29:71:3C:A0:FD:42:0D:7A:8F:12:82:21:F3
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:cf:ee:2a:8b:27:cf:70:bc:67:6e:be:ce:77:ca:b2:ab:
         b9:a5:cd:7e:2b:a7:56:ad:ba:47:c8:c2:1f:72:7d:fb:6b:04:
         52:c2:c0:6b:64:86:09:7c:77:6f:4a:64:94:94:a5:f8:ee:69:
         77:73:37:b1:17:3e:ce:59:c6:02:d5:34:13:f3:4d:89:1e:20:
         f9:6a:52:c2:97:f2:85:91:c5:82:19:4c:d9:3f:c4:e4:a6:30:
         2c:d3:72:7b:e4:27:ec:e6:27:c4:2e:81:c6:6f:0e:91:eb:b7:
         e2:0e:da:37:fe:2f:41:4f:d9:04:19:4d:82:ed:94:a3:ac:f5:
         84:1e:03:3e:23:08:22:82:b5:f1:83:e0:02:fa:bb:f9:0e:63:
         ef:df:db:d1:a1:b2:ae:9c:7c:78:24:c3:da:7a:cb:7a:20:99:
         d9:ec:9f:2f:e1:eb:a1:47:af:14:9e:2e:ab:79:7b:a2:64:2a:
         fd:62:8a:d1:8a:6d:1e:9c:b5:84:7f:a6:24:54:4c:ec:09:8b:
         23:ee:a9:63:9e:27:2b:f7:d7:08:2f:ac:b2:e6:95:d3:84:d7:
         9c:c1:3b:41:0f:fe:ae:a5:9f:3f:56:58:8e:c6:1d:0d:43:07:
         29:75:f3:f6:7a:83:46:52:89:43:53:f1:ad:e7:26:d5:a8:05:
         c5:84:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----