Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File:                     FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier:          qgtq3aP4wUUcB2WyfTZLk4BZi+G6EDmR2NDq8iTTzXM=
Subject key identifier:   66:7D:04:7D:45:DE:6C:76:35:9C:CE:6C:45:FD:D6:ED:02:1D:5D:BD
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer:       /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial:       01962E61D6200CA013C963EB7B552A7A6832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: thvUajSOw2m6u4BkDGErZclk18BWX6KuF3+5YV9YVlQ=)
                          2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:20:0c:a0:13:c9:63:eb:7b:55:2a:7a:68:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=667d047d45de6c76359cce6c45fdd6ed021d5dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:b9:32:2a:f8:b9:05:c4:f4:86:81:a8:b2:
                    72:e9:9e:08:59:54:53:45:5e:39:6e:9c:df:75:e6:
                    d8:7a:95:cf:66:e1:63:8b:8a:ae:ba:0e:24:3b:e9:
                    3b:ac:10:05:f4:07:2e:89:12:cc:7e:5d:da:97:2e:
                    93:f5:68:64:3b:95:49:85:2d:ba:ea:f1:60:ae:c3:
                    a9:17:02:96:a6:32:f8:79:bb:2e:a2:dc:8e:97:c3:
                    69:cf:07:d3:0a:ae:92:70:58:ae:f2:15:f1:5c:f9:
                    04:14:b5:3f:b2:e8:d0:c2:54:ab:d5:10:f0:fd:63:
                    6a:a0:00:4e:1c:09:84:ac:47:fd:6d:39:21:d6:86:
                    0c:9b:99:9e:d3:4f:98:33:0c:f0:86:dd:9e:28:c1:
                    b5:5a:1a:1b:98:28:b5:7a:16:33:ab:85:ed:91:5c:
                    fc:ad:30:ee:f2:30:06:f6:24:5e:1f:21:7d:ca:fa:
                    b0:5c:13:81:f2:75:c6:6b:1c:34:ab:a3:eb:b4:2b:
                    4c:21:81:ea:83:98:c2:38:73:9d:8d:c7:95:f7:8d:
                    5f:8e:9d:e6:30:71:00:7d:4c:dc:9e:7b:04:e8:89:
                    b8:ab:99:b9:1c:e6:bd:e6:99:98:f1:b5:54:02:e2:
                    12:c0:d7:65:1c:69:c3:59:2f:3b:85:3f:b7:56:0a:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:04:7D:45:DE:6C:76:35:9C:CE:6C:45:FD:D6:ED:02:1D:5D:BD
            X509v3 Authority Key Identifier:
                keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:54:c6:a7:15:bf:3f:25:e3:13:e2:97:28:fb:0e:5a:92:46:
         6f:6b:3c:4b:8b:e2:8d:63:cf:d1:f9:2b:90:09:c5:d0:fa:7d:
         e2:21:f7:f6:70:6b:ab:56:4c:96:d8:1e:ab:61:15:c8:5f:90:
         60:af:27:03:b5:2d:d3:94:2e:fc:a2:e7:f4:45:33:c9:e0:5e:
         15:e9:77:31:1d:41:5f:16:1b:03:fc:fd:75:7c:1c:0e:59:88:
         06:9d:cd:02:f8:bb:9a:42:36:50:29:fc:a5:c0:1d:47:0c:01:
         be:f1:d0:7b:49:43:6f:c5:c2:16:03:11:3e:ec:c2:22:15:d1:
         a8:af:0e:db:74:c7:53:9a:72:08:a4:73:f4:34:1c:7b:b3:72:
         c3:fb:7f:9b:77:98:1e:64:32:c8:09:6b:a1:86:0f:71:0f:35:
         80:42:e0:9e:f5:ac:88:b5:4b:51:ab:16:9c:93:4a:8a:07:3e:
         88:bd:8e:32:7c:0c:b0:aa:b1:f4:36:f1:4f:10:cb:0b:ea:2b:
         41:0d:83:c5:10:0e:80:7e:21:df:d4:1d:ee:6d:eb:fb:e9:72:
         1f:e0:fb:95:30:a0:bb:41:87:22:f9:85:ef:16:27:2e:cf:17:
         be:60:bf:7c:45:a9:51:28:ec:76:cb:67:91:b0:76:7a:11:b1:
         d8:17:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----