Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File:                     Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier:          VDdYxm4+jHrZ1kJIn+Ea/dL0tuIxp2YZvcida2Zzf8g=
Subject key identifier:   A6:94:29:D0:47:EF:F8:D2:73:E1:A5:69:F1:4D:3D:AA:A7:B1:88:2F
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer:       /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial:       01962FAB763745E0DE0141D670B42F85E914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number:          09B2
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: 4qjPtLaAmQiihpkjuAyikDzEHrVZjpFBxNb76nNGssc=)
                          2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:37:45:e0:de:01:41:d6:70:b4:2f:85:e9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=a69429d047eff8d273e1a569f14d3daaa7b1882f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:d3:25:60:7f:79:63:ff:1f:62:1b:cc:3f:
                    a4:b6:3f:73:f8:f7:a2:2b:32:fc:7a:17:52:a7:c5:
                    66:11:99:39:a1:7c:ba:9a:7e:69:e2:7d:57:14:61:
                    ac:82:10:fe:cb:d1:78:6f:dd:a3:d2:76:88:bc:b9:
                    a9:67:46:18:e6:e1:62:f9:68:52:6e:19:08:23:8f:
                    1d:e2:44:72:bd:d4:5f:c4:cf:40:3a:56:83:b0:88:
                    8a:72:10:1c:a8:d7:b2:2b:b8:20:85:fa:d2:43:f0:
                    0c:1e:f3:13:f3:62:82:1f:67:57:9c:97:5f:59:ca:
                    24:5d:64:af:25:f3:fe:a6:ec:25:c0:9e:c9:e2:fa:
                    3c:a4:92:ce:e2:14:d2:dd:3d:3f:f8:a8:de:b2:f5:
                    69:d9:6b:c0:67:00:e8:2a:c1:4a:c1:1c:fa:dc:07:
                    b1:91:6e:cf:8d:ed:41:6f:de:3b:f5:36:04:9f:0d:
                    ae:b4:24:05:f0:21:59:17:df:9f:dc:de:55:ac:e1:
                    fc:a9:5f:68:f9:b8:70:8c:8d:45:c0:f6:93:63:1d:
                    e2:52:3f:8f:48:4f:13:94:2d:fd:3f:13:26:88:aa:
                    84:f8:17:0c:60:ef:a8:d1:0b:5c:37:cd:e3:ae:8a:
                    0e:fb:bc:0c:f6:73:8f:1a:27:52:46:37:a3:71:4f:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:94:29:D0:47:EF:F8:D2:73:E1:A5:69:F1:4D:3D:AA:A7:B1:88:2F
            X509v3 Authority Key Identifier:
                keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:7e:ac:58:22:80:26:59:7a:69:7e:77:4b:88:90:b3:0c:
         b4:4f:e5:30:34:e5:35:9f:6b:44:d7:d2:62:41:34:e2:05:0f:
         38:3e:5f:4e:6b:06:50:a1:1c:72:28:cd:71:05:0d:0b:2c:e9:
         12:39:0c:9f:84:8b:2d:5b:49:28:6d:90:0c:64:6b:2b:d0:de:
         80:b5:41:3c:e3:0b:73:41:48:20:77:8f:05:8a:35:f6:10:0a:
         86:2a:2b:87:a2:f5:66:8a:be:80:e1:12:5b:ab:ba:00:2a:9e:
         ea:58:a6:d4:01:b8:4b:65:b1:56:cf:12:c9:4f:44:30:b5:73:
         ea:a7:9b:22:22:b4:fb:5a:29:29:34:d5:d4:d0:54:2f:4f:2a:
         e6:1d:3a:10:61:57:58:f4:c4:c6:62:72:89:f7:2c:ff:03:ce:
         10:67:b0:10:af:41:45:61:38:fc:71:72:d2:a8:3a:dc:0a:9b:
         e7:80:58:56:a0:98:16:ca:b5:7a:d5:cc:0f:27:75:07:c0:ae:
         fa:e2:b1:b2:65:3f:72:d5:05:f4:53:3d:25:40:b8:38:86:7c:
         cd:39:8c:90:74:55:16:f9:67:01:a3:c7:15:86:bd:01:c7:0a:
         90:1f:71:44:78:aa:96:f5:be:be:7b:29:c5:15:00:77:26:b8:
         cb:0c:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----