Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File:                     fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier:          kKpyfi0BkIkt0pXlACLB4ZjGQ3uZAAB1i4blz9Qvm9Y=
Subject key identifier:   CE:60:52:64:FE:40:CC:2D:4B:7F:95:D8:F9:18:AC:24:53:FF:12:B7
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer:       /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial:       01962E994A09EC2A26D075E7970CA7898FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number:          0D79
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
                          2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: RxEyZq8Fl7GN4bTM8BoJqpXED8zWKf0sRAEErck4UxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4a:09:ec:2a:26:d0:75:e7:97:0c:a7:89:8f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=ce605264fe40cc2d4b7f95d8f918ac2453ff12b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:62:e7:e3:e8:e0:65:e7:56:f3:3b:d9:91:
                    9f:9c:80:e4:07:c7:6c:61:e4:8f:c6:03:c3:c7:4c:
                    43:93:11:50:5d:52:73:c0:27:07:30:c7:a8:01:73:
                    c1:61:54:c6:31:b9:69:2d:61:25:68:79:21:ba:e1:
                    d7:ed:e9:14:1c:db:cc:10:ea:1b:fb:0e:65:7d:32:
                    91:1c:3b:31:8e:2e:0d:7a:c5:23:c5:81:4e:38:02:
                    55:61:b0:ea:4b:2e:32:d9:db:a9:e7:fa:39:02:52:
                    30:67:cf:d1:b9:ca:df:71:6d:5e:b3:7f:9c:a2:aa:
                    9e:3d:10:5a:38:e3:ba:a8:eb:92:34:db:37:1f:a5:
                    3c:27:84:5d:56:81:27:9f:64:90:a3:30:aa:4f:d0:
                    1d:d2:c5:ee:79:2c:c8:03:dc:2c:f7:a4:0f:5b:a5:
                    5a:64:e5:85:22:11:1a:b9:df:41:81:0e:b6:0f:ec:
                    be:d2:a4:3c:f4:e2:11:c3:04:d9:10:88:7b:0c:d8:
                    23:f6:dd:56:5d:f7:fb:c3:ad:76:97:9a:9a:cb:6b:
                    17:ca:ce:a6:1f:2f:cf:12:6d:17:6d:46:fc:b2:be:
                    4e:71:51:f8:a7:a4:57:e1:64:bc:7a:80:e6:31:4d:
                    82:b2:64:f2:00:e5:02:ea:1d:25:5b:c5:07:28:e3:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:60:52:64:FE:40:CC:2D:4B:7F:95:D8:F9:18:AC:24:53:FF:12:B7
            X509v3 Authority Key Identifier:
                keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a7:47:66:11:4b:b6:5b:7e:ef:fd:c1:4c:8f:2f:1a:13:84:
         80:cd:1d:56:06:ad:2e:8d:8e:7c:71:52:b2:d5:e8:ea:54:08:
         a0:dc:a1:d6:3b:8a:b5:2f:8e:3f:27:54:db:d6:24:d1:f4:84:
         0f:58:d7:e6:17:cc:85:e7:ae:65:cf:3f:4f:40:11:34:4f:be:
         d5:f9:c8:82:16:dc:c2:52:1f:99:d7:73:04:8b:07:89:e2:fd:
         bf:3c:b3:d9:33:b8:8b:1f:45:ae:cb:f3:71:59:d2:6b:47:4f:
         79:36:82:ca:84:8c:c6:b9:7e:2d:de:a9:8a:0d:77:44:55:8e:
         58:bd:88:19:db:a1:e0:27:1d:a7:0d:6e:e7:6a:c5:e8:bc:ba:
         c0:de:5d:ef:ac:31:4a:6c:9c:11:84:7a:3c:11:3a:f5:1b:5a:
         d0:19:c4:43:c4:76:84:77:83:06:c5:90:ac:27:95:02:7b:94:
         56:f5:b8:9b:9e:4f:55:6e:f7:cb:ac:ce:6f:4f:7e:18:19:40:
         bf:71:49:4e:0d:9e:03:83:eb:93:28:27:c6:a1:cb:95:87:0a:
         2d:ce:f0:e9:38:96:30:fe:31:44:32:1b:ba:04:83:17:e1:64:
         53:93:25:13:5d:c4:d7:6e:4d:22:1e:d9:25:2a:a3:57:34:19:
         ca:ef:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----