Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          GWONWo0kS4OO+OcgiMaxTbnpjj6qaNjCADxI7n8Lb5o=
Subject key identifier:   CA:51:6D:23:FC:2C:EB:03:4B:DE:3B:59:C1:8B:8B:65:54:3E:54:A3
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       01962ECF9BDADB01FDF23DED02DE0B7D0D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          0DB9
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (hash: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=)
                          2: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: efx3f5BPPL/QVs0zIOL1aUmO4TUjwWHSiJgEq9vjRcY=)
                          3: ZYpOnf_RMjUdQRpY5DSmoRhYWXo.roa (hash: 1MZ14FF0b6BfjlsKqzDJT2k9XMlDgyRHFf/YVDEx3LU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9b:da:db:01:fd:f2:3d:ed:02:de:0b:7d:0d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=ca516d23fc2ceb034bde3b59c18b8b65543e54a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:c2:9a:ad:ee:54:2c:67:c4:3d:cb:21:0e:
                    57:d7:56:57:21:92:8a:6d:cd:97:4a:41:15:f0:80:
                    a0:39:f9:11:9e:c9:bc:2d:f6:3b:d1:6a:2b:ab:e8:
                    03:33:7b:81:9e:d7:1e:9b:ac:e5:9a:88:60:7c:dc:
                    fe:2f:49:d1:ad:c0:d8:e9:23:73:09:f4:7e:93:ab:
                    af:44:a2:01:8c:08:95:ce:db:29:98:b6:25:ad:9c:
                    96:d2:a8:f8:c2:9b:39:6d:2d:e7:48:69:97:a8:68:
                    65:22:95:fd:f4:6d:33:ae:56:89:6e:00:16:fc:2e:
                    d4:c8:b0:a3:ed:8e:86:b1:9d:7a:f3:61:20:3f:73:
                    a5:6e:16:8d:3f:cb:f9:1e:8a:cf:46:10:94:a2:9d:
                    66:c7:40:62:56:63:a1:51:41:96:c7:b6:7b:8b:11:
                    14:e6:f2:46:be:ff:a4:9b:b2:3c:08:55:c0:a8:18:
                    d2:43:5a:69:04:37:7a:bd:32:45:cb:e2:1f:9a:d3:
                    60:55:5d:68:a3:7c:a5:22:bd:6d:14:61:9f:9a:45:
                    94:9a:b0:23:fe:9c:fe:01:9e:e1:42:11:d6:2b:6a:
                    aa:fd:0e:a5:17:f6:6e:a9:fc:c3:53:7e:6d:59:ee:
                    87:19:77:27:eb:68:d9:89:62:72:28:a7:0e:08:70:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:6D:23:FC:2C:EB:03:4B:DE:3B:59:C1:8B:8B:65:54:3E:54:A3
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:39:49:bb:1b:4c:69:0d:21:df:56:e2:6a:cf:dd:70:4d:
         17:c6:a0:6a:ab:2b:7d:3f:82:bd:2a:e5:2b:48:c5:7b:9f:63:
         f9:59:c3:77:58:59:d6:a6:b1:17:c6:42:6a:f3:ca:e1:54:b8:
         15:ab:31:39:13:4d:68:84:b3:27:f1:79:11:eb:80:86:e8:b0:
         b1:2d:cf:f1:c3:1d:1a:af:c2:75:8d:f2:a7:42:11:20:f4:67:
         7e:a3:6b:9c:e0:63:ee:76:1c:76:03:92:3b:32:e0:16:e8:da:
         fa:be:7c:7d:a3:ba:00:fa:6c:48:3a:34:74:34:af:11:51:55:
         42:08:fb:4c:d9:ca:37:6e:32:f6:84:e9:41:83:e8:45:9e:90:
         5e:a2:8e:6e:db:92:e1:f0:3e:2c:9f:d4:28:97:8d:32:32:ec:
         f4:0a:81:3b:bc:5b:72:4c:dc:c0:eb:83:34:ed:23:fa:15:91:
         e3:4f:ff:5a:44:de:ab:05:45:a4:96:e5:a4:1c:ab:bf:f1:cc:
         50:eb:4f:9c:d9:ba:7f:a3:61:c5:22:34:a8:fb:ee:2c:91:17:
         a1:00:13:eb:ab:20:e8:00:a9:50:3c:ff:18:5d:de:32:5c:ba:
         53:0e:47:fb:31:cb:50:96:f6:6e:f4:7f:92:a8:3d:28:70:fe:
         74:fb:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----