Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
File:                     1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json)
Hash identifier:          7hMGBXLA7WnR7VC9JSDfWBP9Ic/tO0xPS3lEuy9X/Rw=
Subject key identifier:   56:57:F7:27:5E:58:9C:AD:CD:A5:0F:B1:A0:4D:D1:E3:2C:41:5B:1A
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Certificate issuer:       /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial:       01962FAB78A518F6B9CE0AF1EF9663DC9A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
Manifest number:          0E68
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: 8Rf/WLvQ9upR58Qh/tCTolTEJ1wBv7FeKE1BLae5DxA=)
                          2: xmpcwINBwhfOQ2qyibBKWtgFhyc.roa (hash: RM0GiW910PS4/kJDIOZ/RJgcd9jsdiuKg4ZQlvkwZTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:a5:18:f6:b9:ce:0a:f1:ef:96:63:dc:9a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=5657f7275e589cadcda50fb1a04dd1e32c415b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c2:ce:02:f3:ad:9b:91:92:a0:c8:55:2d:0e:
                    ab:96:51:5c:cc:9e:74:27:93:18:fb:9b:ee:6b:14:
                    27:ff:fc:c7:c5:98:28:b2:95:0e:b1:08:e2:b2:97:
                    a5:dd:b1:69:85:83:98:5f:b3:0d:56:ba:1f:18:37:
                    09:0b:26:a7:40:db:99:e0:f8:c3:c0:5d:5e:1a:69:
                    70:ff:a3:76:55:9f:9a:16:a8:fa:7d:3b:5b:96:10:
                    20:45:a7:75:ed:0c:97:bd:c6:8f:69:53:8a:cb:bf:
                    9d:0e:ac:1e:74:ef:e8:d8:a4:3a:7f:52:76:b3:8f:
                    2a:f9:ad:46:d7:08:50:cc:cd:e0:86:f8:4e:75:78:
                    6a:9f:ac:ee:22:00:9c:23:4a:a4:ba:74:7d:ac:13:
                    a9:74:17:08:83:4f:6f:d0:12:08:ab:a0:86:68:d9:
                    45:fb:69:bf:c4:2b:55:aa:27:62:d3:01:1b:69:66:
                    11:3c:25:8b:e2:2c:7b:88:77:cf:8c:4c:8b:3a:ab:
                    80:a8:41:64:18:71:72:68:b2:2f:88:39:f4:07:ab:
                    2f:52:2f:18:8d:ba:e0:f4:05:a8:b4:2b:ca:35:a4:
                    9c:df:4d:eb:da:e5:8f:02:4f:d7:af:b3:2f:2c:44:
                    fa:d9:00:e8:5c:a6:44:22:a0:68:65:b7:e0:cf:d0:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:57:F7:27:5E:58:9C:AD:CD:A5:0F:B1:A0:4D:D1:E3:2C:41:5B:1A
            X509v3 Authority Key Identifier:
                keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:f7:72:e4:05:5f:6b:d9:d7:93:dd:ca:29:7f:e9:78:8b:
         f9:85:d9:57:8b:be:f9:94:90:ba:6e:9c:7f:0f:57:f5:3a:32:
         c2:21:8a:ed:c8:19:01:ec:c4:a4:c4:82:10:0c:71:73:84:63:
         0f:9c:35:b0:11:0f:3b:27:b8:5d:84:81:4b:30:64:91:03:c8:
         88:8c:97:49:bd:b3:9c:2d:93:02:f7:5a:95:d8:89:c2:d9:2d:
         aa:72:17:c7:22:bd:ae:d9:28:99:ec:3e:00:48:9e:09:ac:90:
         bd:df:d8:a4:0c:6c:64:9d:4b:ae:f5:4f:d7:c4:dc:6d:99:68:
         52:ee:f6:99:ec:3e:94:ce:66:0f:18:b4:f2:51:72:ec:97:86:
         a2:7a:cf:f2:27:c5:59:f6:03:0f:b4:d4:8e:0b:c9:31:c1:51:
         08:8a:66:4b:25:2b:ce:70:92:f4:49:aa:70:67:0c:85:23:31:
         9e:a8:37:fc:8b:76:5a:01:9c:64:5b:23:aa:df:16:e4:74:79:
         4e:ad:9b:66:2b:6b:18:72:b1:a9:1d:14:08:ac:fe:7b:88:53:
         4f:45:f1:39:89:24:1e:d4:82:cd:6e:b2:3e:c5:ae:7c:83:cc:
         48:09:8b:7d:a1:5e:23:b9:d0:b1:b7:72:3c:ac:2b:18:85:91:
         cd:d7:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----