Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File:                     p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier:          QYXStSZzrJKb/DtJv0S1TLbdg39OT3WkgQkzNsNdDR4=
Subject key identifier:   F3:D5:7A:51:E6:8B:89:07:02:50:7C:8B:47:AF:C6:73:D4:8C:43:24
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer:       /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial:       01962F0678D924EE375CE511E02AD03A76C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number:          106D
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
                          2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: m38Oy57ZZ1C3urfcR2/SWssIivMHEdFTpJVDij3bpuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:78:d9:24:ee:37:5c:e5:11:e0:2a:d0:3a:76:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=f3d57a51e68b890702507c8b47afc673d48c4324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:b8:fc:8b:2f:5f:0c:09:8d:4e:aa:54:f3:
                    cb:19:77:3c:1a:66:7c:e0:ce:3f:0d:6b:f0:86:49:
                    39:a2:2c:51:48:49:75:ad:1c:7e:67:c1:06:31:ef:
                    c7:a7:08:36:ba:b4:20:0d:46:9d:24:c5:56:4f:7e:
                    0c:d7:f9:3c:2c:ad:d5:ba:08:98:49:bf:14:8f:ba:
                    a6:4d:50:a3:23:29:d6:31:8a:97:3a:32:52:8b:c0:
                    86:b5:95:70:e6:ee:3f:38:9d:9e:e9:99:0a:ce:4f:
                    bb:7a:fd:37:90:d1:12:55:80:88:4f:70:22:11:0c:
                    07:6f:32:87:20:fc:68:5b:49:4b:82:4f:84:b3:27:
                    58:6e:42:9d:df:41:f2:3e:c8:4a:b8:be:b5:8f:f3:
                    a3:a0:a8:ef:43:5b:60:c9:0a:bf:9a:c1:9e:39:55:
                    b5:e7:2b:9c:a4:62:48:23:1e:7b:38:f1:e0:a4:2b:
                    6b:75:b6:4b:56:2c:a5:ef:d6:20:00:90:b0:27:33:
                    83:21:6f:95:68:3d:94:77:c6:db:1e:9d:e9:a0:fd:
                    5c:a9:f6:16:22:bb:d4:f5:1f:1a:07:15:9a:87:a0:
                    ea:e1:ce:48:24:b5:24:83:d0:36:61:97:ac:c0:55:
                    fb:a4:86:69:9f:c6:c5:12:59:92:58:2c:1b:6e:e3:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D5:7A:51:E6:8B:89:07:02:50:7C:8B:47:AF:C6:73:D4:8C:43:24
            X509v3 Authority Key Identifier:
                keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9a:16:35:23:ee:40:00:a6:eb:ec:d2:c4:94:34:c8:76:a3:
         cb:f2:56:1f:60:12:98:32:3e:49:eb:f0:27:33:30:18:ee:00:
         03:3f:67:56:2c:b8:9f:02:3a:e3:3d:81:ac:8b:ab:a9:de:1a:
         bb:a4:02:a3:20:ce:5e:21:d2:90:3e:e8:94:6c:44:ff:2c:ed:
         af:32:c2:cc:26:8e:f3:0f:ee:10:f1:36:84:75:88:de:6f:62:
         2d:41:ca:4a:53:09:53:52:fd:d4:09:07:1d:fb:29:6c:a3:ee:
         bf:be:c2:d8:20:99:6e:54:91:e5:c0:d0:58:cb:8b:35:41:65:
         bd:64:4c:65:28:14:d5:95:fa:b3:af:90:4d:8b:f7:16:4e:4f:
         3c:b4:10:ac:21:d0:db:bf:fa:f1:83:dc:04:b2:b4:c5:dd:26:
         6a:2f:f3:b4:d6:08:08:2c:c5:82:62:41:8d:56:3f:68:f9:6d:
         e0:5a:e4:71:62:8b:30:91:3d:8b:19:5c:94:9e:68:f5:51:e7:
         06:df:c7:ab:40:75:8a:8c:a3:a0:c4:a2:23:10:8f:90:88:9f:
         f1:e4:79:e7:eb:fc:73:3b:96:c0:6b:1d:99:1d:a5:a2:49:f1:
         a3:23:d9:b3:9c:9d:09:95:5b:87:01:ae:fb:c7:49:65:aa:52:
         39:e4:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----