Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          yLN0SgV1LcQYpcyttSbzyxmZCPvzo7CwXNw/BCoPqFQ=
Subject key identifier:   FB:7A:96:41:75:00:27:FC:43:76:D4:B3:62:2A:45:3B:01:50:F4:8E
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       01962F06F9CB2D269F4B269E84FCA6687FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          0FFB
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: xlDCwA5WCNPxgBMcDBcznclnmApwAsU89DC56ohfIyo=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f9:cb:2d:26:9f:4b:26:9e:84:fc:a6:68:7f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=fb7a9641750027fc4376d4b3622a453b0150f48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:23:b3:0b:c5:69:cf:db:b4:e9:a7:2a:21:
                    d2:72:ca:80:a2:0e:5c:a9:22:7b:fb:aa:58:dc:a6:
                    72:61:87:ad:71:35:f5:2c:bb:56:9d:e0:04:3d:01:
                    0a:61:a0:ad:b6:ef:3a:be:08:43:d8:bd:b8:6e:ee:
                    75:a8:6e:c5:a0:86:27:e2:33:da:e7:2d:26:08:1d:
                    96:9b:0f:99:31:ab:c8:20:04:b4:67:75:e1:c7:d4:
                    8d:ac:dd:49:5f:db:be:04:5d:ea:97:4d:eb:4f:62:
                    05:13:56:8d:50:e5:97:d0:5d:e8:d8:2e:4e:e0:c2:
                    66:4f:b2:f9:d2:63:5f:fc:d6:74:f9:57:f7:48:1d:
                    46:fd:15:6e:fa:b9:16:69:6b:35:64:82:42:bc:00:
                    d4:02:25:a4:c3:d7:3a:63:73:1a:9c:67:68:4a:bd:
                    26:32:25:e3:a4:bc:49:f4:75:4d:f5:d2:01:2d:a1:
                    a1:aa:9f:12:66:7e:de:f7:09:b8:08:f0:74:ac:01:
                    29:a7:b1:57:50:ff:58:a4:89:92:10:ea:39:74:03:
                    6e:d3:97:f0:cd:98:f7:0f:fd:b5:5f:82:07:7c:2f:
                    eb:6d:b9:59:46:0a:2c:67:17:2f:ce:27:2d:68:55:
                    ad:a7:e3:43:41:57:5e:6f:9a:9b:8a:0b:44:39:d0:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7A:96:41:75:00:27:FC:43:76:D4:B3:62:2A:45:3B:01:50:F4:8E
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:51:d9:aa:bf:fc:9e:a3:35:f8:60:ca:2b:82:f9:89:68:
         cc:06:29:ca:4b:7a:6e:c7:6f:47:2c:19:b7:e1:9e:e5:f0:fb:
         49:9c:55:1f:c8:dd:b4:54:45:6c:e0:83:bb:66:48:c6:05:91:
         cd:64:6a:be:a7:cc:02:ef:f9:95:34:f5:1f:79:24:fb:4f:c3:
         8d:c7:84:7f:43:27:55:93:c2:64:a0:e5:74:36:31:86:99:1c:
         60:62:5f:61:7d:09:6d:97:5f:c9:3d:ac:ff:d7:52:9a:df:66:
         d6:32:79:41:25:2f:88:12:07:f6:5f:30:24:9f:39:d0:fe:05:
         41:f0:97:48:8e:6c:aa:a4:8e:81:3b:08:35:8b:e5:5e:11:e6:
         1e:9e:da:d9:f9:3f:37:de:66:f6:5c:17:15:2a:8e:fc:a3:87:
         30:f2:97:77:fb:fb:bf:e7:1d:a6:d2:72:0d:6c:f3:fe:9e:6d:
         ee:1b:46:a6:63:d9:ef:35:77:c3:19:9e:e5:24:de:0f:9d:28:
         74:0e:73:72:32:b2:1b:f6:a0:72:3e:c6:08:26:76:a2:34:8e:
         c9:b5:2e:2f:70:17:78:a6:6c:fd:19:3d:74:a2:2a:18:c8:86:
         a8:d3:75:34:61:ca:6f:39:fb:b7:2a:24:89:4a:d8:28:f4:01:
         c1:22:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----