Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File:                     f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier:          BQGvB5aVRUMTD5yPlJN+5/95kxT6HgwFZ2EvUCIxBKg=
Subject key identifier:   BF:6D:FB:78:9D:4E:53:EF:E7:B2:D4:E7:8B:72:E7:03:A9:C7:4B:2D
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer:       /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial:       01962FAB54838A066E928F7D10B0E111D208
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
                          2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: 2mlM/aA/AxaQ2hdRXQOLV7rQGBRWne3did0G5G5dLrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:83:8a:06:6e:92:8f:7d:10:b0:e1:11:d2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=bf6dfb789d4e53efe7b2d4e78b72e703a9c74b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:ff:4a:b0:98:b5:55:dc:fe:4e:ba:8d:7a:
                    55:1b:b6:c0:71:82:82:9b:21:15:e3:1d:1f:a3:27:
                    c7:bd:e8:69:4a:16:4b:2a:b5:5b:8b:e8:25:d2:80:
                    11:74:3d:1f:29:88:ba:35:87:fb:ab:0c:de:a0:fd:
                    cf:2b:9b:e3:e3:2c:db:78:95:62:02:db:97:ca:b3:
                    6c:84:40:ce:8a:bd:22:d9:06:45:1b:ef:47:b2:c9:
                    53:8f:71:32:fd:e1:9d:a6:f4:a1:bf:f4:c8:37:95:
                    4d:64:ce:ca:c6:fd:ad:ed:fe:a1:e3:38:db:09:20:
                    c6:d7:3c:79:c6:f0:60:36:0e:a3:d4:d3:43:6d:f3:
                    10:fd:77:00:35:0e:94:28:a7:c9:bc:7c:be:1a:3a:
                    9c:b5:a6:d5:11:4c:48:37:e6:3f:97:fc:bf:ac:60:
                    bd:56:1f:b4:dd:5f:80:67:de:85:7f:b7:21:27:71:
                    9e:10:ca:6d:2d:23:e0:91:4d:c7:bf:f8:7c:09:4c:
                    d6:47:af:9d:d9:ee:10:56:3b:46:1f:f2:3b:c6:93:
                    64:d4:e5:3e:9c:43:e6:17:e4:26:d5:0e:bb:42:f4:
                    52:67:0e:1a:dc:53:a3:13:44:ca:56:44:d7:41:61:
                    ca:31:86:0f:41:4a:e4:76:ee:61:6e:c8:e3:66:19:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:FB:78:9D:4E:53:EF:E7:B2:D4:E7:8B:72:E7:03:A9:C7:4B:2D
            X509v3 Authority Key Identifier:
                keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:bb:a9:7d:8a:09:5f:e6:16:46:f1:63:2b:90:ef:8d:f2:
         8e:7b:fd:a1:20:2d:1d:93:4b:ca:3a:0a:cb:53:69:04:96:11:
         a5:de:1f:c5:f6:69:b2:62:7b:3d:df:0e:26:72:b2:ac:85:47:
         18:88:d9:a3:29:c5:7c:71:f8:f8:87:a2:ee:51:e9:20:6d:e2:
         7f:cd:9b:2d:3c:2b:92:ad:93:b1:3f:6b:5e:a3:e9:ff:99:50:
         ee:8d:9f:0f:35:d6:84:56:65:22:ca:85:c4:55:3b:ec:96:13:
         3d:90:60:52:67:90:cf:79:12:3d:22:d7:12:d5:c3:86:48:05:
         de:94:18:c2:4f:8f:38:1f:78:2a:23:1e:a9:58:bb:98:e5:44:
         ce:00:33:0d:cc:2a:31:26:46:2a:47:36:63:cc:dd:7d:05:c6:
         9f:cd:04:40:48:f9:34:18:ef:1e:97:f0:82:8f:c8:35:5d:ed:
         0d:3d:35:f1:b3:c1:32:55:58:db:aa:14:6b:76:ce:b6:6c:b9:
         50:c3:07:d5:62:ea:4a:4a:8a:f7:b0:4f:6f:4d:0b:95:48:83:
         1a:0a:46:28:f1:de:37:78:c5:3c:fc:7d:e9:b4:57:5f:58:b7:
         44:99:0d:b3:5c:6c:9c:e8:c0:c8:9a:0d:34:28:63:09:d3:c5:
         d6:c5:d5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----