Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          31yOq1wFUNPMUcuBi/9aSojkE2654nYz+Y0lGH00MrY=
Subject key identifier:   65:8D:D4:07:DA:62:8B:98:50:39:64:74:8A:39:88:B0:3B:3B:CC:BE
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       01962ECF8258ABB0F478A0E3A26DB6F2D36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0F33
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: pVWRgUagWG2l8FMG5gBYGhMdfdmJvzWGuzJE+9MVemc=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:58:ab:b0:f4:78:a0:e3:a2:6d:b6:f2:d3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=658dd407da628b98503964748a3988b03b3bccbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:2c:79:34:6e:61:1a:f1:6c:0b:4f:66:6f:
                    d3:7d:be:e9:3d:d0:6c:93:f4:99:f5:53:4e:b0:2f:
                    32:33:d9:ba:2f:c0:f0:34:84:98:fe:ff:e8:02:0b:
                    be:1d:5b:7a:e8:2e:74:5b:2d:59:81:f8:eb:76:2a:
                    aa:67:32:bd:f9:fa:f9:83:8f:4c:a3:6b:17:58:e8:
                    f2:cf:53:51:b7:65:2a:a4:a3:2e:ff:65:d1:5e:38:
                    0b:a5:49:d6:6f:6c:b8:42:5d:e3:74:63:90:a5:bb:
                    c9:ad:c1:0a:31:f2:6d:f4:82:7a:30:c1:6b:c4:3e:
                    8b:da:6c:80:e1:40:c2:af:42:b6:cb:6d:93:db:4a:
                    2d:6f:c3:ef:a5:50:9e:a1:53:d2:95:77:f1:7f:1f:
                    ec:ac:40:a4:ba:61:36:e6:d3:a3:2a:28:9f:8f:57:
                    b4:dc:e5:01:2c:89:c4:98:c0:09:c0:92:b3:7e:75:
                    da:3b:71:a9:4a:e1:11:c3:60:71:69:01:6e:89:f6:
                    d7:55:df:b5:ce:1d:21:21:6b:74:6c:e3:0d:71:1f:
                    80:cf:66:de:fc:00:11:31:cf:38:5c:b1:d8:e0:9e:
                    e5:ac:49:a5:62:71:d5:a7:7f:9f:d3:35:36:d4:37:
                    18:52:5e:58:37:65:df:16:ca:0b:cf:ed:1d:0a:ad:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:D4:07:DA:62:8B:98:50:39:64:74:8A:39:88:B0:3B:3B:CC:BE
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:ee:8b:f7:5e:60:43:7e:c1:71:12:ba:a2:4d:af:ad:a4:
         ef:40:77:43:47:ee:f2:cc:fe:1c:7f:72:20:44:7f:5a:a7:c1:
         98:f4:bf:ec:dd:bb:83:97:cf:f0:dd:64:e4:65:76:ed:49:54:
         df:43:e4:89:a0:7e:83:83:c4:1b:4e:35:63:8d:d2:68:0f:d6:
         62:98:da:60:04:1a:33:c3:5b:23:52:e0:52:05:69:f7:c0:11:
         59:b6:aa:9d:01:e8:29:f5:45:86:4a:83:0b:93:44:52:6b:0a:
         fd:4d:6c:fe:b5:b1:57:6c:4b:bb:95:e9:17:ed:ac:d6:d4:25:
         3a:e4:7c:9f:f9:af:98:92:4c:eb:57:45:30:63:79:18:7b:a7:
         2e:e1:c0:d8:9c:13:ab:d8:3d:af:ce:a8:93:ea:47:91:07:ee:
         28:96:b4:32:24:c5:88:2a:03:9a:9b:62:d5:3b:15:c8:24:25:
         da:98:44:a6:64:8a:60:be:f3:7b:9e:4f:d6:16:f3:79:b5:02:
         7c:05:b6:08:55:f7:84:06:da:bf:8d:55:c2:42:bf:9c:a6:c0:
         cf:1f:c5:83:43:0a:b4:a3:52:f4:9f:cd:de:2c:e5:14:11:49:
         bc:25:13:f6:ec:6c:19:e4:c9:da:9c:3c:c8:be:a8:ca:c0:ee:
         d7:54:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----