Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File:                     1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier:          8ff+qQsDtELq6Nxdc9qOAwwUASQCjylbFf8mSbBUwzM=
Subject key identifier:   3C:00:13:C9:95:03:7E:20:E8:05:C4:3F:CB:32:55:5F:8F:97:C9:55
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer:       /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial:       01962E9943C3E70B26268095D97F860AD038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number:          01CA
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: UBWf0a+cZXVxkI6ToUWhIX0zklfEzfBhEdc1BMEl4EA=)
                          2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:c3:e7:0b:26:26:80:95:d9:7f:86:0a:d0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=3c0013c995037e20e805c43fcb32555f8f97c955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:d2:24:b3:c2:54:43:ed:41:22:2f:74:d6:
                    b0:23:ac:ca:d7:5f:b7:2e:ab:98:9b:41:87:7b:90:
                    a1:26:a2:ea:fc:ae:da:9d:8b:73:2c:12:ae:3e:c0:
                    50:11:33:73:58:1b:1a:b0:e6:1f:66:a8:dc:6e:13:
                    46:52:8c:9d:bc:c1:ed:99:a6:8d:cf:71:cf:42:92:
                    3c:cb:f4:a3:3a:c8:d1:cf:38:a8:a4:71:a8:c4:77:
                    23:1d:af:d9:0d:b7:c2:0a:f4:57:cd:a3:a3:4d:5c:
                    e3:23:0d:69:43:46:b1:69:f7:e5:46:57:d7:d7:57:
                    77:ae:9b:98:57:66:4a:31:31:91:c4:ea:60:1f:d6:
                    68:43:20:72:6a:e0:89:8f:03:5c:f3:fe:ac:42:7b:
                    d8:5e:04:8b:05:ce:63:71:b2:b6:05:92:6c:fc:a2:
                    c1:79:73:0a:2c:54:44:d3:75:f3:91:70:83:cf:2a:
                    2f:e0:e1:f4:b5:1c:44:fd:48:61:99:2a:d7:4b:0f:
                    ca:ed:e1:fb:6b:64:fa:c1:e8:88:7f:28:13:9a:7d:
                    87:54:af:5c:a6:b0:07:32:2a:91:51:b0:11:a6:12:
                    08:2f:f4:ad:1d:1d:6d:66:ac:33:94:d6:90:db:f7:
                    4e:3e:21:7b:a5:08:8d:0a:b1:05:fe:7f:29:5d:3b:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:13:C9:95:03:7E:20:E8:05:C4:3F:CB:32:55:5F:8F:97:C9:55
            X509v3 Authority Key Identifier:
                keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:42:52:bb:13:24:f5:d2:de:16:03:05:c8:5f:b3:98:a7:
         6a:b3:0c:cc:19:e3:44:ff:14:9f:16:ee:9f:01:c8:62:0b:0d:
         bc:5b:ef:16:2f:58:54:8c:38:5c:46:03:78:a7:c1:a3:b4:92:
         0f:57:75:7b:9a:31:c5:25:bb:d3:11:3e:22:87:40:a9:71:34:
         c9:4b:23:4a:9a:56:1d:f8:d5:0a:89:bb:47:28:9c:32:bc:3e:
         9d:db:91:a9:37:f8:5e:77:f9:9d:56:02:08:bd:4c:17:be:2a:
         fa:6b:2f:73:27:42:8b:5e:bd:39:ee:73:d1:f8:4f:7f:8b:86:
         50:59:83:ef:c5:31:df:27:b1:2f:3d:c9:9b:11:32:62:95:db:
         65:b4:a0:d5:ee:95:ad:e7:d1:ba:26:9e:e6:75:5d:4b:30:6d:
         bd:5b:6a:d2:e6:b8:af:59:94:00:e4:cd:c5:92:09:ea:f6:74:
         9d:98:bd:50:a1:3d:0e:41:f5:eb:7d:99:07:35:f5:8b:e8:e9:
         f7:35:db:7e:39:a0:9a:8c:2e:46:42:b1:54:97:4d:83:e5:aa:
         55:e2:0f:d3:24:d8:41:65:cd:b7:54:76:e7:2c:d3:fe:6c:c4:
         c7:05:14:52:1a:a1:08:70:a9:0b:70:7a:d7:91:2d:9d:48:92:
         b1:17:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----