Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File:                     FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier:          sJ1vm4zCglxBLDQWH/ZKYKV4dMDdIkQWxiYvqPP/qvM=
Subject key identifier:   13:A8:DE:3B:1C:35:E7:4F:FD:0B:A3:15:C8:F3:1C:C9:F0:01:57:D5
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer:       /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial:       01962E2AE70EA370013C7E145799DFC59D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number:          019C
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
                          2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: +IYu9H8lnjs+vdYhPTPgg/2F58BXfh2pg4kz9f6YGac=)
                          3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e7:0e:a3:70:01:3c:7e:14:57:99:df:c5:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=13a8de3b1c35e74ffd0ba315c8f31cc9f00157d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:e9:3e:8c:47:3f:95:77:1d:26:29:03:ff:
                    c3:9a:94:30:72:c8:12:64:95:ad:bb:7b:ca:3c:67:
                    1c:c0:b9:88:54:88:33:dd:25:a1:fe:41:4f:a8:e8:
                    f0:ef:0f:1f:62:67:44:0c:de:ee:f4:5b:6e:5c:a1:
                    2c:6b:65:e2:86:8b:fd:31:b0:8a:91:0a:f9:da:06:
                    f3:e5:d8:ae:fb:5d:a9:bf:19:e0:d5:65:0e:b8:e6:
                    79:13:07:36:48:51:9a:0c:64:af:17:2a:3e:74:f7:
                    24:5d:f2:5e:59:89:00:47:c7:02:5d:50:67:a7:26:
                    5e:b5:23:04:cd:68:2c:71:47:4f:0a:b2:9f:f6:40:
                    2d:81:37:f1:58:cc:ed:2a:4f:cc:52:97:ea:d2:bf:
                    10:03:b9:7a:46:42:6e:96:b5:7a:7f:38:a1:0c:5a:
                    4f:a8:26:24:ad:29:23:e4:f1:36:cd:87:10:51:c5:
                    69:4d:83:ba:32:2d:f1:16:b3:14:c2:01:c7:5f:a0:
                    a0:fa:24:ea:14:dd:7a:22:cb:0b:1e:8a:5c:6b:e7:
                    f2:4e:7b:3b:93:ee:79:21:79:1c:8c:96:38:05:78:
                    13:30:a9:d6:70:2e:39:c7:a7:8b:ac:36:af:7e:58:
                    3b:8f:62:aa:89:76:d9:50:43:04:6f:4f:99:de:bd:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:DE:3B:1C:35:E7:4F:FD:0B:A3:15:C8:F3:1C:C9:F0:01:57:D5
            X509v3 Authority Key Identifier:
                keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:6c:39:b4:b6:94:35:fe:52:fd:3a:47:18:7f:22:56:6a:
         4c:d1:2f:f1:4b:20:e0:6e:43:c7:ca:68:c6:64:57:05:6e:ca:
         3e:d0:ee:b4:ce:35:a4:fd:77:cf:6c:12:8f:4c:a3:fd:da:2b:
         78:f6:5c:6c:25:0e:05:2f:81:a6:49:92:9f:a0:b6:d6:1b:f4:
         ab:11:14:9b:81:ed:a6:d8:30:e1:df:5a:66:f3:a7:05:88:ec:
         bc:14:6d:c6:c0:85:35:ef:d7:f2:52:e2:39:cf:29:34:e8:38:
         fa:b1:b9:4c:e0:4b:65:de:4d:11:33:e8:b0:1b:ef:42:df:5a:
         e1:7f:94:16:2e:41:b9:46:d6:a3:5d:71:61:ca:db:e9:1a:ca:
         69:6c:bb:88:87:0a:e1:e0:78:4b:25:11:a0:89:54:cf:d0:ba:
         a7:c6:96:d2:d3:b1:e7:82:ab:bc:35:62:e4:b9:2b:e7:19:94:
         e8:67:4a:ad:aa:15:7a:c2:30:91:8e:26:11:8e:95:b5:ca:92:
         3d:d5:8e:26:6d:cc:2f:eb:00:a2:e7:16:29:83:87:96:5d:a5:
         13:5a:96:a3:c6:9a:91:f7:b8:ee:d0:0e:1b:a7:78:12:29:4d:
         ae:d5:ac:f4:1c:87:87:e6:89:c3:1c:43:56:4d:9d:c5:83:82:
         7f:28:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----