Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
File:                     _SqYOFjGha4w7gNeigMFQkiMXws.mft (raw, json)
Hash identifier:          40br/uPb21bXlhapxTVt4n1ux/CvzjOuR9b5IS752aY=
Subject key identifier:   1F:95:0E:DB:37:40:99:76:43:BA:D5:26:84:81:FD:E8:E1:A2:33:28
Authority key identifier: FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
Certificate issuer:       /CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Certificate serial:       01962F0738B8ED8E51B77FCE51B4A7A1E1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
Manifest number:          0332
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: _SqYOFjGha4w7gNeigMFQkiMXws.crl (hash: NbEypLpA72+13g8aWq3IqiFU5NF7zeLMH9TB+vucDnE=)
                          2: mcWI4GIqipBUvrnwIHMQKmS2RCg.roa (hash: RNQDLaE2tgJjxnmWK+M407e+BB24q00+oDFiCmR/ZNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:b8:ed:8e:51:b7:7f:ce:51:b4:a7:a1:e1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2a983858c685ae30ee035e8a030542488c5f0b
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=1f950edb3740997643bad5268481fde8e1a23328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:e4:23:99:2b:5e:15:3a:33:e0:64:0d:0b:
                    1f:83:4e:ca:bd:38:e5:e8:e7:b5:93:13:20:2f:93:
                    a1:2a:47:8c:fd:d5:4e:2d:6e:80:81:21:b5:66:f1:
                    ca:12:48:99:71:b8:11:cf:8b:db:4f:68:17:64:08:
                    6c:c7:4a:3e:93:f5:c0:17:00:49:22:fe:b6:b3:8b:
                    c8:76:bb:f8:e7:04:4a:d7:29:b5:cc:e6:90:38:98:
                    e7:48:65:4d:d5:ea:c6:2b:43:ac:e9:1f:55:2f:38:
                    e8:92:45:bb:86:1e:aa:2d:5a:40:be:c8:4a:7e:81:
                    41:de:04:21:25:48:a6:ab:72:8c:43:af:fd:10:ae:
                    db:03:65:9b:6b:33:ed:5a:87:f8:0b:3a:12:56:ae:
                    18:1d:00:82:eb:ae:72:13:db:b9:c5:d6:cf:10:40:
                    0d:8d:62:32:4e:76:5c:05:52:f1:79:ea:17:57:12:
                    ab:40:82:aa:c3:11:07:7f:8d:3f:1d:f6:b9:82:48:
                    69:ae:9b:46:4a:1c:69:1f:d6:02:78:6b:bb:f5:b3:
                    ca:75:b0:a9:bc:3e:3f:60:95:61:fa:ae:08:73:60:
                    03:8b:db:e8:20:93:94:d5:be:a9:51:04:ab:84:a2:
                    89:47:ec:bf:83:ef:f7:ea:10:1a:05:a8:a9:e3:d1:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:0E:DB:37:40:99:76:43:BA:D5:26:84:81:FD:E8:E1:A2:33:28
            X509v3 Authority Key Identifier:
                keyid:FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:08:fe:83:bc:45:10:e4:a0:e3:f4:a1:91:f4:7f:c4:87:ee:
         df:5e:dd:6e:4f:18:27:37:29:5b:d0:ae:18:b1:35:1e:a3:89:
         4d:8e:e3:10:dc:40:92:47:0b:e8:46:f7:26:d2:95:1a:48:13:
         7f:04:53:30:a6:58:80:ef:70:50:69:b9:07:bf:22:b5:fa:c0:
         70:38:d4:0b:b4:83:4d:8f:cd:df:eb:a4:ac:96:69:87:21:68:
         89:b6:34:61:4c:7b:fd:2a:c4:36:c2:fe:36:23:d3:93:17:fc:
         36:63:09:40:d4:22:7d:de:38:59:97:49:fd:04:24:a1:5a:3e:
         12:5a:77:6c:6f:a7:d9:39:20:47:76:f3:d9:c1:50:52:36:fc:
         5e:88:de:d6:dd:8b:29:9d:39:4f:e6:1c:1e:1b:bb:7a:b3:2b:
         21:f1:04:90:b6:29:53:5c:46:18:6f:e6:f6:9d:32:5d:6c:3f:
         96:a6:2f:91:a5:37:d9:b1:1c:21:b9:73:ae:c5:7e:7e:51:7a:
         be:17:8d:8d:f8:07:b8:24:a9:f0:37:67:cc:88:17:d8:86:fa:
         ff:15:a3:0a:bd:5a:2f:79:52:e4:0d:86:97:11:0f:dc:84:11:
         1f:a5:81:4c:6a:1a:60:3d:c1:d4:83:cb:aa:2a:bd:27:09:83:
         05:ba:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----