Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File:                     1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier:          apmvbhykNi6TXByDFbujqhDDFyLrCzbA4ms1O37cwGU=
Subject key identifier:   FC:5E:58:67:2B:CA:24:02:D3:2E:57:0B:26:30:0C:9B:AD:13:3C:FE
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer:       /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial:       01962F745D9B9CBF8D043497871FA0D7C28B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: 27h4C9qerrkGD0kUIcbLRfytWrLxtj/gPvCmJUrpaRE=)
                          2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5d:9b:9c:bf:8d:04:34:97:87:1f:a0:d7:c2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=fc5e58672bca2402d32e570b26300c9bad133cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:26:f5:86:82:65:4c:07:95:ef:8d:88:b0:
                    e6:a7:19:3e:0c:4e:6f:dc:0d:cf:06:82:76:87:cc:
                    58:67:b6:6a:9a:85:9c:a7:25:01:6b:45:f6:8b:e0:
                    c3:44:a0:c4:6e:8d:09:99:a6:15:f1:09:18:f3:d4:
                    a4:fb:0d:dd:46:3d:5a:dc:84:2c:45:c9:7c:22:6c:
                    df:04:e2:4b:48:40:66:8f:70:2d:05:3b:67:80:72:
                    ee:5b:e9:11:62:00:58:b1:65:b4:7b:bb:aa:9c:6c:
                    46:8c:88:b0:c4:ba:95:7c:5b:c3:8a:c7:57:5f:e5:
                    1c:22:88:87:07:32:1a:cb:47:36:00:a1:38:63:2c:
                    5e:c2:11:bc:07:d4:f8:25:12:3b:91:9c:5b:d9:a8:
                    5a:de:06:91:f7:96:64:a1:c3:d3:ee:9e:e5:32:ab:
                    6d:bb:76:e0:5f:b2:13:d0:68:9f:af:0f:75:22:ad:
                    55:3a:32:74:e0:f8:af:34:a5:1a:02:ba:22:fa:cc:
                    22:48:92:b3:97:9a:3d:11:54:95:fa:e8:3f:78:a9:
                    81:a2:ed:07:08:8d:4b:ab:9c:f8:72:00:d6:59:bf:
                    f3:30:11:82:3f:5b:05:af:7e:2d:04:df:f0:2e:24:
                    27:d0:d7:ce:e4:6f:2f:0c:83:a7:8a:3a:51:5d:26:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:58:67:2B:CA:24:02:D3:2E:57:0B:26:30:0C:9B:AD:13:3C:FE
            X509v3 Authority Key Identifier:
                keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:06:0f:2e:ab:78:a3:89:0e:96:48:d1:59:66:68:62:1c:fa:
         d1:88:01:52:18:dd:13:fd:b8:90:44:0b:d6:95:8c:85:19:0a:
         e3:f4:2f:e9:9c:d8:24:a4:a4:c3:9d:eb:ef:3c:d1:fb:b1:a5:
         6a:e7:26:5a:09:6d:67:91:a4:7f:0c:43:ea:a7:bf:44:56:64:
         34:24:15:31:67:c9:40:16:54:d6:6c:fe:31:f7:e1:d5:e7:aa:
         be:76:de:dc:57:d8:96:d8:e3:4f:29:f5:71:f5:66:13:d6:6b:
         1f:5a:ca:21:c2:d4:e0:e8:a1:c9:75:1b:36:4b:68:ef:11:27:
         5b:8c:ce:fb:b1:19:e1:11:68:12:f5:6d:44:f2:07:87:d3:16:
         c8:66:fa:51:7d:88:5e:2f:b8:41:e4:96:ff:56:55:6f:88:93:
         c2:17:e7:02:15:79:62:cd:01:09:b5:7a:b6:67:34:c9:38:da:
         75:71:5b:3c:23:2e:22:56:03:b7:ed:93:9c:fe:5e:9b:cc:bb:
         35:7e:bc:88:6f:8c:a5:19:ef:0e:78:91:c2:f0:5a:82:6b:3b:
         b7:7e:bf:a9:91:2f:33:e9:e6:55:5e:6d:03:53:b0:aa:13:5f:
         18:01:10:fe:4a:ea:4e:df:3e:c0:37:b8:ad:a3:5b:0d:5e:c2:
         38:7e:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----