Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File:                     1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier:          7IWdF+LhPx3rC+v1QJ6wUckB8yBtVUyVe1LlirDEn/I=
Subject key identifier:   5C:D7:31:D3:70:95:90:BE:E6:D3:1D:23:1D:00:A1:5A:40:C0:0E:AE
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer:       /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial:       01962E2B4163BBF44055A3B5512806595AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number:          067D
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=)
                          2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: v8b6zYxTB0ZieWte51Z45fTye1bRMa5GunnUUSuqzd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:41:63:bb:f4:40:55:a3:b5:51:28:06:59:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=5cd731d3709590bee6d31d231d00a15a40c00eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:62:3a:ce:72:cb:fa:a7:55:95:77:c3:aa:
                    db:d0:48:a3:af:b5:56:3d:01:97:ac:10:4e:1c:87:
                    dd:a7:ac:b1:19:8a:2c:02:5d:f9:13:c0:e6:b9:e6:
                    d0:17:38:8d:2a:8b:ba:73:02:de:87:18:18:2d:d2:
                    ea:6d:03:35:0e:3d:f2:bf:f9:61:f6:c2:44:ad:44:
                    8b:b5:73:e5:62:1f:46:58:d0:80:ae:4e:41:24:7b:
                    1d:8c:4c:69:3a:68:ab:0b:9b:1c:b2:2d:1c:62:64:
                    29:59:3b:78:af:46:ff:b5:bc:e3:22:c3:bb:ca:74:
                    6c:48:75:ef:a0:c3:09:75:b3:5e:a5:27:83:2e:04:
                    50:14:48:f4:02:bf:2a:59:19:33:79:a2:ac:20:c2:
                    1f:d5:81:35:3b:ef:79:35:c2:d0:d0:d9:f8:40:d9:
                    59:89:96:e5:14:dc:7c:37:e0:03:88:97:63:db:75:
                    78:62:7f:62:5a:36:46:51:77:43:8a:68:de:1d:06:
                    7d:53:4c:3a:4e:ab:7f:c0:ed:cf:1d:29:92:e1:2a:
                    5a:f8:36:11:27:8a:7a:88:00:55:04:ed:1a:10:b9:
                    36:2e:43:29:d4:36:8e:15:66:93:2b:af:6d:0a:73:
                    10:e9:df:13:27:23:6b:f3:91:42:02:e5:9e:a8:35:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:31:D3:70:95:90:BE:E6:D3:1D:23:1D:00:A1:5A:40:C0:0E:AE
            X509v3 Authority Key Identifier:
                keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:32:df:6e:d6:64:6f:ec:f2:03:db:2f:89:bc:f9:3a:5a:
         b7:00:c2:34:f3:d5:96:96:25:49:76:73:b5:0f:37:d3:a1:1f:
         3b:1b:3a:6d:3b:8b:2e:33:56:43:5f:7d:6e:72:88:b5:81:02:
         b2:f6:67:70:bf:e3:17:53:85:ed:f4:35:ca:8d:0b:c6:c3:02:
         54:c2:0f:0b:6e:f9:7b:37:3d:aa:06:2a:16:1c:9b:73:3b:17:
         f4:64:70:35:1a:49:59:71:93:43:81:df:be:ac:34:fd:73:10:
         1c:fc:f0:fd:76:5d:e2:7f:9e:a7:9e:0b:a8:fc:99:8f:5e:fe:
         87:5f:1d:02:73:07:30:fe:a9:44:f4:73:d2:78:57:19:b2:ef:
         29:0e:5e:a2:ff:40:3a:ad:0f:e3:25:69:51:52:fa:54:14:02:
         de:97:15:80:7e:19:e0:ac:ee:a5:51:63:14:97:0c:75:29:6e:
         fd:99:84:38:0e:ba:ea:b2:04:cf:96:82:ee:02:54:99:9a:b3:
         69:c6:b1:0b:52:6e:98:0a:36:d7:58:f6:be:34:d5:13:31:fa:
         4b:b8:22:51:fe:a5:f9:09:25:43:b8:05:0f:a6:ad:30:5d:36:
         0f:8e:06:4e:13:61:33:ba:a4:bd:f2:4f:29:68:5e:e6:58:e8:
         d7:b0:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----