Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File:                     FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier:          xwC9zZaKbqAk2knNQmEzK2S1e+fGjDeT+IlelrauHCM=
Subject key identifier:   0F:0C:4F:95:DF:FC:5D:82:E6:3F:EF:00:4B:B9:6A:77:03:A9:1E:71
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer:       /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial:       01962FABAB3A9206BA2D0C9909A0E2BBDBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:41 +0000
Files and hashes:         1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: tQMLsGrkjh0cSOuBru6BicGr2D1XGWdI5IqBTTeXqbA=)
                          2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:ab:3a:92:06:ba:2d:0c:99:09:a0:e2:bb:db:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: Apr 13 15:01:41 2025 GMT
            Not After : Apr 14 15:01:41 2025 GMT
        Subject: CN=0f0c4f95dffc5d82e63fef004bb96a7703a91e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:d3:f2:95:ac:32:f6:d0:5b:50:8a:1d:b6:
                    a9:ff:a9:b2:4f:33:0d:43:da:02:c6:f0:b7:17:31:
                    5c:45:2c:0d:15:b4:d8:a9:3c:b0:2f:5e:31:61:f6:
                    0c:fb:c8:7f:0f:91:41:d7:a2:4c:af:e0:2f:d2:7b:
                    cc:17:a2:bf:ba:3c:1d:67:cb:a9:9f:40:5a:42:ce:
                    af:84:f2:2b:ce:d6:e3:ae:ac:cc:33:48:3f:59:e7:
                    2b:2b:bd:d5:93:20:f4:b5:df:91:7d:f6:12:69:09:
                    9a:ad:bf:7a:55:94:95:d6:83:a0:f5:4d:24:1d:8c:
                    aa:9c:d5:2d:22:ce:3c:0e:0b:ca:81:fd:e2:d3:77:
                    4b:b3:92:fd:df:69:44:e6:69:99:52:05:9d:fa:dd:
                    ae:ae:d4:0d:11:de:24:8c:63:ce:0b:10:d3:15:23:
                    4d:af:9e:94:92:4a:ff:f4:fe:de:9a:fb:df:29:9a:
                    a7:e8:57:ee:b2:b1:ce:61:e8:cb:9d:94:42:0f:08:
                    71:bd:2a:4b:17:74:96:23:53:da:cd:5d:02:f0:c6:
                    38:3f:f5:7d:82:ea:24:89:87:af:d0:ce:2a:5b:b0:
                    23:6b:3f:78:da:10:2c:5b:c1:c4:f5:49:db:b8:e5:
                    7b:29:c3:cf:44:87:9a:e9:a7:51:30:d7:db:c3:0e:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:4F:95:DF:FC:5D:82:E6:3F:EF:00:4B:B9:6A:77:03:A9:1E:71
            X509v3 Authority Key Identifier:
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:98:d8:11:6f:ee:ae:80:03:20:14:df:4f:c0:b8:9b:d7:
         ad:40:e0:84:ef:33:3d:00:09:4a:02:b4:a4:05:91:ba:30:ac:
         95:b1:95:d0:e1:d8:18:76:d1:40:80:3c:4a:f5:6c:a3:0f:0e:
         78:05:12:a4:bf:6c:eb:b2:38:40:96:a4:68:58:44:fc:43:f4:
         84:a8:60:97:04:d5:9f:15:19:ee:af:0c:df:69:47:83:9b:b7:
         24:25:7d:15:70:d7:7f:8c:92:37:83:3f:b2:de:42:c7:0d:6b:
         c0:68:58:ac:36:29:68:7e:57:6c:dd:b1:d3:fc:a0:4c:4c:9b:
         9f:be:75:a1:01:44:01:3e:98:aa:57:b5:c2:c5:31:e0:c0:79:
         a3:c2:25:61:b2:06:ba:d1:3f:70:02:1b:0e:ac:d6:dc:bb:eb:
         6c:46:7f:8d:e6:ca:d8:3d:35:51:0e:57:24:62:61:ed:b4:e9:
         43:fc:55:27:bd:04:72:11:3c:2b:0a:1c:14:b2:00:44:6c:4e:
         36:ab:40:1c:5e:9c:3b:59:95:dd:63:83:88:b4:f9:63:2e:c2:
         89:e9:87:d7:0b:ba:ed:b4:0e:99:d7:5e:a6:c6:d2:11:80:80:
         e3:f0:b9:53:54:a0:ce:cd:62:96:fe:40:80:b4:28:e6:6a:84:
         38:9a:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----