Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
File:                     fujoTNwPSdrCk637XgSkkQjO1kY.mft (raw, json)
Hash identifier:          QuM1GM8LRQiiDZrzdNUNt4/dj1byI2gnW1RPSph7050=
Subject key identifier:   AD:14:FA:B3:0F:4C:34:FC:B2:A7:F3:1B:40:29:33:66:14:64:2E:54
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Certificate issuer:       /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial:       01962E998F56DD08BB32538C503A9624366F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
Manifest number:          04C8
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: Ovv3jRDadSuJuvhS-S0kK_fQ9ro.roa (hash: X1g4S0KOxzsTxSeEns4d0ko+VlZEXePzUj9xmUEL7Qw=)
                          2: fujoTNwPSdrCk637XgSkkQjO1kY.crl (hash: FHBRZGOSNHL1jf2YdtGsctjlnWPXePNYLnQoBOQVPOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8f:56:dd:08:bb:32:53:8c:50:3a:96:24:36:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=ad14fab30f4c34fcb2a7f31b4029336614642e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:81:38:a6:78:4b:42:71:94:f7:e1:fe:63:
                    2b:07:be:86:88:dd:4b:ec:5e:b0:c5:78:3b:a2:63:
                    8c:6f:aa:4b:29:7f:44:4d:a1:68:60:3b:03:c8:29:
                    35:94:a8:96:0d:05:a3:d1:71:97:d5:d5:da:b4:d6:
                    07:14:35:e7:15:8a:22:5e:85:39:12:87:4c:91:0c:
                    69:7c:22:34:39:c6:08:58:a2:92:b6:e6:54:b9:bd:
                    81:30:53:44:56:34:aa:30:8d:04:60:2b:a1:f7:bd:
                    6a:58:11:eb:6b:ee:30:86:91:95:37:90:8c:03:12:
                    e1:a1:be:f1:8b:46:87:c5:f2:3b:b8:71:ea:05:16:
                    cb:76:56:2a:79:82:14:c5:2a:73:b8:14:a2:01:80:
                    4e:12:a6:ad:70:61:f5:19:a7:71:08:d6:74:91:a5:
                    99:cb:b5:ed:e5:1d:a7:2f:e9:ed:de:0b:cd:ca:7f:
                    38:ad:33:f6:34:23:03:01:43:d7:53:01:a3:a4:5a:
                    80:25:38:7a:4e:97:fd:cf:d6:8f:85:67:82:e0:33:
                    72:97:78:37:c9:1a:90:48:d1:80:15:cb:2e:21:e1:
                    4b:b8:50:f0:82:4d:21:24:a7:d0:1e:27:54:ce:f3:
                    6f:28:1b:5a:58:aa:d4:f6:05:6e:d8:02:84:9b:a9:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:14:FA:B3:0F:4C:34:FC:B2:A7:F3:1B:40:29:33:66:14:64:2E:54
            X509v3 Authority Key Identifier:
                keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:fb:be:4f:d0:59:07:11:b2:ca:e1:f3:77:74:c5:49:2f:
         31:65:c2:4e:fd:fb:61:39:27:7a:eb:98:f2:dd:c2:08:d7:c3:
         73:69:26:82:94:5d:4f:41:69:18:87:c8:3a:41:f6:9c:ae:0d:
         b6:f2:97:9a:cc:9a:a2:cf:ac:91:81:68:37:a4:9b:7c:f8:98:
         cf:2e:92:71:f5:ff:f0:6d:1f:42:43:6e:05:af:25:9c:24:f1:
         78:6d:c6:94:ce:e0:8b:a7:30:be:37:a3:f1:14:17:e5:3a:88:
         f8:56:5c:cb:56:b0:f4:23:87:52:87:e9:b9:08:6d:d7:89:9d:
         a0:b9:c7:a6:9c:fe:66:16:af:b2:9c:3d:b9:71:37:0f:ef:ec:
         aa:9d:aa:cf:ce:b7:2a:70:6a:6d:99:78:12:99:fb:82:a1:ac:
         36:98:e4:e6:e0:43:a3:a5:81:3a:28:7a:e3:f0:26:3e:20:26:
         be:44:9d:bc:44:b9:dd:7a:19:80:76:4a:4c:26:4a:fe:00:3c:
         6b:6e:c5:a1:e9:e7:b2:4c:91:fc:15:9b:d9:92:d4:74:07:f2:
         4e:67:a4:48:87:15:4a:4f:c9:8c:e8:a7:7c:60:74:a0:51:d9:
         ef:f9:3b:ff:58:80:42:58:a9:b0:c1:99:f1:f1:34:89:c7:45:
         7e:64:77:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----