Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File:                     _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier:          Bj8EI2xhs474Rkt3Yi7RWZx/wqGizqLKk+zWnGKic60=
Subject key identifier:   93:AB:86:00:EC:21:1F:08:9B:9F:B7:4E:AA:13:22:BF:C7:BD:05:44
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer:       /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial:       01962E98C119E4FED7225F3412191259D3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number:          11ED
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: CFr2LD8qLpzrn0XBREHAmSPcdsOXR7+Zs5S419LVl8Y=)
                          2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:19:e4:fe:d7:22:5f:34:12:19:12:59:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=93ab8600ec211f089b9fb74eaa1322bfc7bd0544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:ca:0a:eb:ee:f4:d2:05:53:6e:91:59:82:
                    b7:8c:29:0e:76:6a:70:2f:c2:60:d6:2a:02:56:c8:
                    91:c7:32:11:d8:e9:e5:df:95:eb:0a:51:39:ba:e6:
                    f6:68:ff:6b:37:ca:ba:4e:40:05:06:30:3f:78:77:
                    b4:d2:cc:42:03:91:1f:14:53:eb:1f:4b:a6:44:8a:
                    57:2a:fa:f8:fe:47:b8:55:67:7c:fa:c9:79:04:4f:
                    9b:02:c7:40:3c:bf:f7:56:b4:e8:c7:a3:80:f8:61:
                    e1:90:dc:0c:15:43:5f:56:de:38:f4:03:cb:6a:5a:
                    e7:2f:83:8f:91:fb:ee:96:e7:0f:9a:17:f4:0d:b3:
                    b4:db:10:85:08:78:8d:34:a8:e9:ff:42:78:0e:6a:
                    1c:19:58:b3:bf:0d:d3:ed:af:21:04:66:05:8b:74:
                    a3:ae:b4:ca:3a:2b:a9:6b:f8:75:10:ba:3b:70:c7:
                    c1:ef:8a:9e:90:a0:24:e2:46:ba:17:92:35:6e:0c:
                    1d:2b:f7:e4:70:7c:11:ea:f8:be:9b:1c:36:04:bd:
                    79:bd:8f:64:b6:68:ed:39:da:80:9e:70:b6:42:ca:
                    b3:5a:f8:07:df:bc:25:d9:fe:b7:c5:53:e0:67:65:
                    82:d8:1b:7e:77:8e:80:0c:e2:f7:8a:c7:ae:81:cf:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:86:00:EC:21:1F:08:9B:9F:B7:4E:AA:13:22:BF:C7:BD:05:44
            X509v3 Authority Key Identifier:
                keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:c5:c6:d3:70:8a:f3:ca:34:93:8c:3c:ed:09:c3:79:ac:
         a3:a0:aa:de:a7:e5:00:02:42:5f:ec:8b:fc:b2:dc:b5:26:e4:
         e9:ea:0c:e1:00:94:64:d8:57:d8:4d:08:97:77:f5:30:1c:f5:
         df:ae:81:a7:b2:74:12:49:bb:78:ad:1c:4f:bc:9e:db:03:a1:
         a1:7f:8d:fe:ef:31:79:eb:a2:6b:a8:e6:ac:7c:55:34:69:8b:
         a4:0f:9d:33:18:ff:10:b7:88:86:7c:3e:0b:45:97:b8:0a:69:
         a8:ce:e0:37:91:f1:3d:b9:be:dc:64:6d:1f:70:6b:ac:d1:1d:
         7e:35:1a:02:c3:fc:cc:74:8c:b2:80:8d:01:6b:4c:47:8d:99:
         c5:10:79:d5:93:8e:96:9f:97:10:c3:df:46:38:47:ef:a6:d7:
         fd:df:09:2c:b5:e2:41:c8:c6:c7:f0:8e:84:23:48:41:b5:3b:
         e4:ec:7b:4b:8f:e6:5f:a5:e5:44:f9:09:f3:f4:8e:01:05:3b:
         2a:83:74:3e:9d:2f:ff:94:4f:b9:90:61:54:8b:e1:77:a4:0d:
         5a:87:1d:36:49:cb:5c:e4:06:90:9f:36:d0:fa:bd:fb:fa:cc:
         d3:56:41:e4:26:c8:47:b8:38:48:a9:42:3f:08:e8:b9:0f:a7:
         0a:f1:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----