Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
File:                     fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json)
Hash identifier:          uow/2QmUOiImfGx3uYYDXikDT0JaQEQNE/Z7zfKd0sY=
Subject key identifier:   3E:4F:C5:E9:62:45:6B:D8:D6:A8:01:41:E8:91:43:24:28:CE:97:C4
Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
Certificate issuer:       /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Certificate serial:       01962E98C073F8C1DD6F0C86BDE2E5768D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
Manifest number:          F5
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: 01ZVHJTa1955Yqjv0fqQDq555U7Dh8Me22zuhJ1aEyg=)
                          2: kgTnhPtf5U0Bz8tjOOggGBZkLG8.roa (hash: HNiluWUdkJ/NWqiUVgEDQcdv9s5KKhDvu8H4CNi9wMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c0:73:f8:c1:dd:6f:0c:86:bd:e2:e5:76:8d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=3e4fc5e962456bd8d6a80141e891432428ce97c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:25:19:41:c2:f5:b1:8f:18:23:25:68:1c:
                    64:ef:da:24:54:79:50:7c:e7:71:1c:b2:c9:4a:d2:
                    3c:cf:31:46:a6:d8:b2:d2:6b:2f:c4:da:72:f3:bd:
                    fa:44:27:73:eb:9b:8f:05:75:2a:cf:31:ec:ae:67:
                    d5:54:9f:d4:4b:c8:b3:59:9c:cf:d6:32:21:72:07:
                    d5:90:4c:94:6d:2d:48:02:8d:1f:9b:4a:30:b7:ea:
                    ec:0f:ec:b2:7c:3e:79:f9:52:ba:64:17:d2:76:1d:
                    8b:2e:73:4c:6c:5f:6d:31:d3:42:31:0b:d4:ba:40:
                    f9:e0:90:d4:19:5f:79:29:2a:b3:4d:9a:43:7b:ac:
                    6d:db:bf:f3:f4:ae:82:d3:50:5f:ac:83:43:a5:50:
                    db:97:95:9c:7e:93:be:0e:c4:b7:24:ab:cb:38:84:
                    79:a7:66:09:4c:1a:5b:de:0e:a8:c8:5a:11:fc:94:
                    34:e7:05:4a:aa:92:90:60:83:f6:d1:66:33:2c:0d:
                    60:f4:2c:2a:2f:97:e2:a3:ec:1a:1a:57:20:16:3f:
                    38:b3:a1:9e:45:64:d6:95:cd:2c:de:41:de:cc:7f:
                    37:34:93:70:a9:91:99:61:79:8a:9d:6f:69:94:e6:
                    9b:58:45:83:04:ee:7a:b3:be:be:02:87:76:7d:12:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4F:C5:E9:62:45:6B:D8:D6:A8:01:41:E8:91:43:24:28:CE:97:C4
            X509v3 Authority Key Identifier:
                keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:00:71:2e:dc:48:70:37:4c:9c:ea:1d:2c:a6:64:2a:f4:
         5e:32:e3:cb:fd:b4:33:7f:a3:7e:cd:91:e0:78:b3:55:ea:fe:
         cd:2b:c1:41:eb:64:dd:f0:01:33:69:32:ed:83:8a:a6:fb:5e:
         7d:43:8c:0c:a7:c5:67:bc:71:86:3f:31:1f:c6:e3:4e:2b:e4:
         8a:27:4c:c1:82:23:36:4f:20:98:5e:61:51:64:bb:51:d9:9d:
         a2:70:cf:17:eb:18:80:35:9f:01:f5:54:6a:cc:67:44:15:ae:
         72:9e:90:f0:a6:1d:53:d7:bf:25:94:12:2b:a4:30:43:2e:cb:
         1b:d3:b9:37:9b:1e:2c:92:94:92:66:eb:2d:1b:3e:c5:51:e5:
         96:11:95:82:40:03:f9:e2:bd:a9:2c:db:b8:aa:5e:01:2e:b0:
         ef:5a:60:9f:f3:ed:3c:69:9f:70:35:3e:d5:f8:0e:1d:5e:5a:
         e6:b8:45:c9:6c:54:6b:e8:b1:30:25:9f:3c:97:10:00:5e:ca:
         60:de:46:9f:a1:97:51:41:e5:49:3d:1c:c0:6e:05:08:ad:7c:
         b5:23:98:f6:bd:6d:c6:95:bc:90:c7:3c:a2:f4:9d:a5:76:9d:
         06:b6:b3:0a:0a:6a:cb:55:11:d0:c0:e7:f3:1b:75:d5:13:c1:
         2e:4a:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----