Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
File:                     f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json)
Hash identifier:          qrSMB7urgM+HmiaRBvyRlqrNDaJYf9Tto65nTeu9Izk=
Subject key identifier:   31:3C:26:D5:D0:8B:E8:6B:E1:0E:1E:23:4A:F0:69:E7:B5:B8:53:DD
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Certificate issuer:       /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial:       01962E61F098A2930E5CB5E2EE0AC579D548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft
Manifest number:          0355
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=)
                          2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: ZLiWUxpHfvPn1uYWadjv1keOMmiv/e/Bx3C53I0Necg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f0:98:a2:93:0e:5c:b5:e2:ee:0a:c5:79:d5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=313c26d5d08be86be10e1e234af069e7b5b853dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:71:e7:64:97:76:c7:ea:c1:24:0b:dd:3b:
                    67:b4:28:2f:f4:3c:2c:51:2b:29:ab:44:8f:2d:2c:
                    b0:44:a9:4e:11:01:7f:e2:ac:51:3c:76:45:f1:03:
                    db:fb:53:e3:5d:5c:a2:e7:89:89:70:aa:ea:13:31:
                    da:95:3e:38:d5:95:85:0c:cd:a0:7f:6e:41:94:37:
                    8e:0f:87:89:68:ce:2f:4d:44:4f:c8:4c:f2:1d:cd:
                    c6:ab:46:07:bb:09:f6:e3:4a:b4:d0:69:7b:23:e2:
                    d5:8e:d3:ba:d0:5d:20:f2:84:2b:37:1e:7f:6b:8a:
                    2e:eb:96:72:6d:11:73:7b:ed:bf:1b:b4:b4:12:aa:
                    8b:a8:89:48:4f:fe:e8:65:37:5a:38:3c:21:ae:ba:
                    60:74:22:62:ca:62:59:1d:75:25:66:42:47:c5:4d:
                    c9:a9:68:63:44:02:ab:65:e9:8a:6d:85:ad:e7:26:
                    63:b1:4a:f6:c1:8e:00:56:63:63:77:4c:ec:f6:5d:
                    6d:dc:ce:dc:b2:7e:e6:ec:70:8c:16:d6:fb:09:64:
                    9a:ad:1a:3a:2f:4a:74:78:80:1d:6f:56:1e:8d:bd:
                    16:05:1b:7f:3e:45:a0:4f:0b:36:cd:f1:1c:9a:34:
                    8e:fa:75:88:61:79:cb:5a:6b:46:47:12:48:09:c2:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:26:D5:D0:8B:E8:6B:E1:0E:1E:23:4A:F0:69:E7:B5:B8:53:DD
            X509v3 Authority Key Identifier:
                keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:c5:f6:e4:78:89:7c:7f:35:e1:b5:c3:25:84:10:81:21:
         22:93:e9:86:7d:4e:92:9d:fa:97:51:10:2c:f7:d1:4f:b1:c6:
         62:e7:7f:88:45:0c:70:c4:50:59:b3:41:29:e2:b2:bb:c7:ed:
         96:cd:1b:61:11:36:3f:e6:7d:53:7b:5a:30:f6:f2:71:fb:88:
         7c:83:ec:83:e0:03:6a:45:01:e4:ed:29:2b:6a:c0:d7:d0:e0:
         26:13:35:85:e8:e2:18:45:06:6b:61:11:f2:22:fd:d6:15:2b:
         4e:b5:47:82:69:86:90:99:28:07:47:e0:31:c8:4d:81:c2:81:
         1d:ce:d9:a9:05:5b:10:75:16:da:6b:56:e9:30:c9:dc:da:dd:
         0a:40:b4:d4:f2:ad:6b:9f:ae:ca:40:06:c6:b2:5c:67:64:b3:
         75:bc:19:f2:83:7f:c5:af:9a:63:4f:c9:62:cb:2d:e1:74:a2:
         48:ff:7c:66:de:cc:14:09:f0:53:da:91:a4:2a:ef:df:e8:9c:
         82:e8:9d:9f:d3:77:52:bd:53:e8:82:cb:eb:0f:28:d7:ab:e5:
         23:5f:5b:ce:d8:26:f6:c4:d7:bb:eb:f5:8a:5f:c3:f1:67:b1:
         2c:b6:c8:8a:c0:44:fc:ef:62:5f:4e:eb:eb:03:4d:32:d8:e5:
         ea:2c:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----