Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File:                     FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier:          OTDN0aIsfJ7f7U0I2ofTjO3T5TwwussYdCMU6g6V8JI=
Subject key identifier:   37:3E:AF:D8:2D:C9:26:73:F4:98:2D:3C:B6:4A:DE:E8:DA:85:1A:C2
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer:       /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial:       01962E98C423DE734B1FDE74479412C63B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number:          0D29
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: Y4Fmy0loalGR3Z/f3YyP+QKBS20nn7Hsh6T43tyhLZM=)
                          2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:23:de:73:4b:1f:de:74:47:94:12:c6:3b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=373eafd82dc92673f4982d3cb64adee8da851ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:56:b7:2b:3e:37:e4:f5:88:e7:3d:30:7f:
                    95:74:66:05:d7:9f:79:ae:b9:c0:06:db:cc:4d:55:
                    47:43:b9:dd:a7:e1:52:de:18:77:83:8a:c2:53:fb:
                    ec:f7:3a:3e:3e:7d:8c:44:11:ca:92:56:12:55:cb:
                    a3:09:ab:d3:85:f4:d6:3b:28:12:96:94:fc:40:bd:
                    50:a8:65:61:06:7f:37:cc:58:b0:a7:c7:bb:04:c8:
                    da:5a:31:2a:a9:dc:d5:ac:bc:4f:e6:a3:db:75:1f:
                    d3:33:be:22:07:73:b3:de:c1:ea:b8:e1:6b:06:1a:
                    84:51:ba:2e:9f:ff:a7:f5:31:36:72:5f:94:c0:b1:
                    0c:20:0d:5c:0c:17:aa:b8:43:c9:80:98:dd:74:9e:
                    8b:ae:1d:38:ea:d9:8a:3b:c5:fe:18:25:de:74:74:
                    4d:c4:54:94:ea:55:51:ad:2b:a1:16:df:17:cc:71:
                    90:2b:00:32:dd:cb:79:45:67:50:68:a2:a2:35:de:
                    5a:73:78:ca:d1:85:a9:08:87:6e:2d:c8:59:31:97:
                    47:28:ca:7b:e0:f1:0e:d8:fa:8d:9a:e0:d1:d2:c4:
                    89:c3:66:2b:39:e1:b5:05:5d:b0:37:19:f8:5a:e3:
                    0f:21:0a:53:f8:ca:bd:eb:60:14:a1:c8:43:77:f3:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3E:AF:D8:2D:C9:26:73:F4:98:2D:3C:B6:4A:DE:E8:DA:85:1A:C2
            X509v3 Authority Key Identifier:
                keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d2:89:0a:f5:22:8d:bf:4f:91:e6:43:12:3d:93:2b:4f:be:
         cb:d7:28:01:9e:ad:76:98:2b:02:28:64:db:bf:18:28:54:d7:
         54:3c:17:54:01:fe:21:eb:50:e9:85:98:ff:f0:69:bc:93:41:
         c0:78:43:94:31:33:96:01:4c:83:b0:dd:34:a3:a5:c7:6d:2e:
         36:28:07:63:d6:45:93:51:10:84:c3:70:11:31:c8:cd:10:35:
         66:c6:98:1e:81:1d:11:7a:f9:7e:ca:ab:82:99:8d:21:95:f1:
         9a:ca:f0:36:9d:70:07:06:fd:e8:e0:11:d8:0f:00:b0:38:8c:
         ee:e8:d9:4d:c1:b3:75:95:e6:36:78:43:23:36:cd:d9:51:44:
         a0:15:f0:5c:ad:32:e5:0c:14:12:ef:b7:f5:69:75:d7:48:cc:
         5e:bc:da:e1:9b:e7:de:18:ec:b3:59:17:d4:b8:64:53:ac:6c:
         53:96:ba:d2:f6:ac:22:39:01:5e:8f:65:6f:67:96:3a:34:7c:
         1d:3e:59:ca:99:86:f2:6e:33:2c:84:79:27:6e:f6:69:d0:80:
         ff:6c:d1:6c:15:12:0d:2c:6c:e5:81:9c:fc:5f:cc:54:a7:88:
         a4:eb:7c:ad:b6:fa:42:f5:ff:05:a5:21:2a:d1:29:98:5d:99:
         fe:75:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----