Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File:                     seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier:          gZFYmYQ/foOwfAy/GGWlNoc+OHso5ziCJyEG3znUKM0=
Subject key identifier:   FB:CB:BC:94:03:28:83:9B:5F:76:AD:EC:54:D7:F5:A0:02:FC:6C:77
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer:       /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial:       01962F0669CFD438477EC853559BD98B2A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number:          049F
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=)
                          2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=)
                          3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: G5HUFSR5Nw//tigvIxR75RHH680hAXlrDvIeedIaJak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:69:cf:d4:38:47:7e:c8:53:55:9b:d9:8b:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=fbcbbc940328839b5f76adec54d7f5a002fc6c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:3c:f6:4c:de:ae:e6:f5:24:3b:da:ba:39:
                    1a:5e:e4:53:91:9d:7e:ba:82:b4:27:0a:ca:2f:73:
                    13:e2:cd:26:10:c5:c5:29:c0:1b:d0:4e:31:a9:4f:
                    75:ba:82:da:94:8f:16:d5:c2:02:1e:15:e9:cd:da:
                    ef:88:67:8d:13:73:32:f9:88:81:a5:be:ba:ec:65:
                    dc:e4:f5:9c:76:38:e2:6d:65:7b:b2:9a:75:b0:a3:
                    b5:cc:be:9f:94:ba:12:53:c2:b0:c5:03:bb:1b:52:
                    d7:9a:67:f9:08:0b:44:43:20:81:5d:43:ec:e1:e9:
                    25:1c:b4:ae:94:18:23:b9:bc:4c:50:5a:81:ce:0f:
                    bc:1c:c2:86:ac:7f:a5:10:c3:c0:47:10:41:e6:fc:
                    38:4b:01:3c:61:c0:2b:20:3d:99:0c:2b:24:03:2d:
                    5d:72:99:ed:eb:1e:e3:47:c5:aa:13:4e:48:cb:cc:
                    fd:c6:ea:92:e6:5e:d9:37:20:96:80:23:c0:12:39:
                    2c:59:1f:32:0e:66:b3:c4:ea:ce:51:fd:f3:92:ab:
                    99:3d:41:8a:7f:31:85:3a:1e:74:dd:c0:98:c3:6c:
                    76:56:12:90:a2:c6:8b:46:1f:57:c1:8a:16:ad:87:
                    33:d8:64:da:14:d1:9a:10:0b:18:f3:80:6b:e4:3c:
                    81:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CB:BC:94:03:28:83:9B:5F:76:AD:EC:54:D7:F5:A0:02:FC:6C:77
            X509v3 Authority Key Identifier:
                keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:07:52:36:2b:f1:ca:dd:e5:68:e0:da:fc:ce:ad:bc:b9:b4:
         d3:62:43:84:cd:62:c2:30:cc:89:5a:21:9c:ec:3a:f9:93:1f:
         0e:5c:9e:83:db:de:17:7c:7f:b4:c9:e3:cf:3e:23:6c:61:f3:
         1f:fc:c5:28:6e:3e:27:5c:53:20:b2:59:b1:3b:c7:1b:2b:4e:
         51:0d:3a:e4:ed:66:bc:47:3d:72:5c:8a:44:e5:c8:60:f8:fb:
         89:99:35:60:39:58:de:5e:d0:e1:00:e8:95:92:f4:63:37:40:
         87:42:2c:e6:1f:db:40:3a:ae:4b:64:76:5a:6f:c9:c9:4f:a1:
         60:3d:90:0f:9e:60:fa:5b:a9:28:ce:be:62:f0:ad:1e:de:e4:
         84:0b:80:b1:8b:1c:f0:50:75:2b:e4:44:39:56:f0:04:60:66:
         61:26:72:d6:49:fc:35:08:ac:c7:b3:67:e3:1b:37:2f:ee:1f:
         fa:b8:da:8a:9a:93:93:d1:78:17:22:be:6f:1c:c9:4c:4d:bd:
         b4:42:af:de:8a:67:7f:1d:83:39:a3:1f:c3:cb:57:e7:74:1e:
         77:71:14:a4:82:88:00:0b:de:a8:dc:1e:c3:ad:48:b4:df:e3:
         24:3e:1c:3d:a2:36:ba:b9:0d:0b:6a:d4:26:33:7d:2e:05:95:
         0f:89:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----