Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File:                     flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier:          YYLDsVND1pHalZ1XAKHHvJRWMdutJ2iy2K9dt2qgfKE=
Subject key identifier:   64:6A:20:8D:99:44:AE:89:2D:BB:A8:E4:EE:85:FE:F9:2E:4D:11:07
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer:       /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial:       01962DF40EEE4AE114C7FBE8B4F43D2D12E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number:          07F2
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
                          2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: M43UnNnyRYuCfsN9V2anh+cwzRcxEpawrnBvk5mcUMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:ee:4a:e1:14:c7:fb:e8:b4:f4:3d:2d:12:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=646a208d9944ae892dbba8e4ee85fef92e4d1107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:fa:39:ff:71:df:b0:33:5f:83:72:10:28:
                    d5:27:79:2e:95:3f:8b:e3:18:8a:3b:c9:8c:0b:22:
                    57:60:73:2f:03:70:4d:02:0e:cf:36:06:44:35:35:
                    ee:21:64:2e:3b:4c:dd:11:d4:71:30:13:49:ed:6b:
                    40:ff:13:1f:1d:d5:58:39:7b:91:aa:95:e8:1b:a0:
                    a6:28:fb:b6:c8:bd:d9:ee:ec:40:15:bf:48:e7:82:
                    5a:13:51:64:46:a9:4d:bc:b9:54:15:9f:13:fd:11:
                    c0:7d:f3:2a:8d:fa:63:b8:3e:e9:9b:51:ee:01:ed:
                    b3:6d:f3:39:30:48:7b:0e:aa:c3:da:25:60:03:dd:
                    69:24:ef:49:71:93:26:24:df:33:54:87:c2:94:00:
                    12:2f:4d:23:6a:27:fd:8f:67:c8:82:02:28:57:83:
                    65:c7:60:39:82:6f:9f:d7:3c:ed:18:d2:49:74:12:
                    ac:58:5b:df:ae:c7:88:32:60:cd:8b:19:e6:27:6f:
                    8d:d3:cd:47:3e:04:8f:45:45:b5:d2:b3:b5:8d:d1:
                    b6:9f:a7:25:5f:b0:97:c2:f1:cf:05:19:ac:bf:8e:
                    c4:81:80:8b:67:d3:ec:7d:1c:fa:23:ff:15:9d:2a:
                    cf:6d:43:58:e1:5f:74:52:a6:ad:39:8b:09:08:d0:
                    25:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6A:20:8D:99:44:AE:89:2D:BB:A8:E4:EE:85:FE:F9:2E:4D:11:07
            X509v3 Authority Key Identifier:
                keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:1a:8e:d9:af:8f:fc:8f:1f:ae:ac:f8:95:98:64:80:e1:
         d0:61:46:61:9c:7b:1f:59:59:56:0e:da:e3:8e:2e:c4:b0:5e:
         9c:4d:d2:9b:b5:0f:44:5e:4c:cc:86:65:a7:d4:ee:bb:50:9c:
         b4:6c:80:ce:89:50:08:4b:fe:1d:e9:79:bf:37:11:a3:22:10:
         75:1b:61:88:cd:a9:e3:67:40:1b:42:6a:c4:6b:59:bc:1c:bc:
         98:a1:7f:dd:9c:b4:b0:4c:9b:99:1e:74:29:a7:aa:1b:87:b2:
         75:72:a7:45:6e:0e:4d:8c:0a:7e:6f:1b:4b:ff:03:85:55:94:
         fa:f7:b3:55:1b:27:28:a3:11:5f:ef:73:1d:93:94:c7:75:8b:
         5a:a3:b8:57:27:2c:15:5f:cb:50:bc:97:a4:bf:e8:8e:4d:f1:
         8a:a3:f7:a3:46:b2:f4:73:51:fd:e1:8d:98:d1:ea:f6:e7:ee:
         88:67:ba:66:12:58:80:88:06:fb:d0:8b:63:85:c1:a4:3c:d4:
         15:f9:45:c1:34:0b:4b:50:c6:94:67:b6:90:2e:0b:5b:f1:de:
         90:0e:e8:f0:3a:90:ff:a9:cd:6f:b8:71:5b:ff:3c:6f:11:93:
         21:5b:6e:06:68:11:21:2d:80:ae:7f:d3:29:f0:c3:df:a5:89:
         f6:b5:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----