Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File:                     FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier:          ZJbvqb6l+l9wp0rKFvushbXA5zA19BiJBy9MHSNvdYE=
Subject key identifier:   FA:84:40:10:8B:DC:54:96:20:FC:17:B2:D7:4B:FD:E8:1A:C9:E3:69
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer:       /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial:       01962E9939629643CE09E8E31CF2796703C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number:          0F72
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: p0rFg5TIrRRtTbotC2A5BC6kbDtumro56LMs8ZeEd6E=)
                          2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:39:62:96:43:ce:09:e8:e3:1c:f2:79:67:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=fa8440108bdc549620fc17b2d74bfde81ac9e369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7b:8c:7c:e7:fe:d2:37:6e:b5:71:56:a4:d4:
                    59:79:f3:6a:39:65:a9:aa:73:99:86:3c:51:9b:6c:
                    06:4c:8b:2b:15:a7:20:b8:5a:40:cd:fb:65:06:b8:
                    a1:eb:ba:aa:84:36:14:71:c0:3d:33:5e:09:c1:43:
                    ca:da:ea:40:35:ab:42:50:23:86:ea:72:2d:c1:a0:
                    d5:7d:c1:0f:6f:8e:11:28:60:51:92:29:b9:ae:ec:
                    74:92:ef:c0:69:16:7a:d1:f4:65:86:be:b5:fb:6b:
                    14:fc:bb:f4:be:1f:b9:c6:31:11:34:53:6c:4c:0a:
                    39:d7:d8:af:d4:c2:1e:d5:0d:62:91:31:40:b4:76:
                    0f:be:62:d6:8c:bf:bd:95:d7:0f:87:72:b8:13:19:
                    d1:9e:50:67:02:6d:76:5f:45:7d:e1:bc:0e:ca:2b:
                    d5:d2:87:2d:bf:b1:c8:a9:b0:13:3c:dd:52:e8:8c:
                    7f:6c:07:f6:11:6e:1a:0e:2f:c6:fa:6d:30:1b:b3:
                    0d:92:5a:b9:9d:1f:eb:b7:89:ce:2c:4e:35:44:f9:
                    61:fd:3a:15:44:f0:b1:f9:55:c8:62:38:bb:78:b3:
                    32:e6:45:a6:53:90:ff:bc:07:3f:19:e5:8a:43:45:
                    8c:df:85:4d:4f:b4:8a:85:0c:d6:1b:dd:b0:6e:80:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:40:10:8B:DC:54:96:20:FC:17:B2:D7:4B:FD:E8:1A:C9:E3:69
            X509v3 Authority Key Identifier:
                keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:77:0f:20:21:f5:47:bb:ea:59:f5:45:53:4e:44:d6:8b:
         51:ff:3b:f2:d8:dc:9b:7a:93:a7:96:71:1d:96:4e:07:bb:7f:
         b8:2e:13:01:1a:34:cd:74:1a:75:81:16:bc:72:e6:34:d4:35:
         be:4f:84:46:48:9d:ec:ec:a5:0b:0b:57:96:79:e5:c2:35:4f:
         2c:d8:97:24:46:75:5e:b2:77:91:2b:50:72:b2:9b:55:c0:12:
         1a:c3:9f:ee:d8:f9:78:9a:28:43:de:a9:cb:a3:7b:cb:18:34:
         b2:9f:25:63:e2:29:04:39:44:c4:00:0a:db:99:d4:fe:4c:a3:
         bf:ed:21:60:11:3d:6e:49:80:84:8b:76:79:3e:44:ec:dd:0b:
         a0:92:61:a2:9d:fb:b5:cd:97:4d:29:6e:44:14:1a:7e:d1:f7:
         41:42:88:d7:42:b2:93:a0:98:02:ec:8a:fb:85:bc:08:f0:23:
         a2:34:7f:be:79:24:33:ee:40:49:8d:e6:bd:fa:72:88:a4:8d:
         43:3f:5a:92:9b:ee:f0:94:30:44:6a:92:f6:fb:c6:3a:be:76:
         a2:c0:45:a4:c2:86:02:3c:6b:fb:d1:8c:23:33:16:9a:9d:c5:
         d3:5f:4a:07:ef:f5:12:38:dd:cf:62:a1:48:01:e7:1f:cb:92:
         2c:d4:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----