Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File:                     fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier:          QC1mie2Ls68vdtLO+YpDIDEuggNqCpE4BDnaqtNgRSI=
Subject key identifier:   E6:7A:23:AC:B5:2A:A4:FD:79:F0:12:AD:9C:4D:E4:86:30:8A:D6:5E
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer:       /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial:       01962E2AF17D14721F95582EC95B5CE86761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number:          0640
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
                          2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: GtDwviOeLdYPKtUjRsVIPtWgbI7YgTFjp4piQWrbMQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:7d:14:72:1f:95:58:2e:c9:5b:5c:e8:67:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=e67a23acb52aa4fd79f012ad9c4de486308ad65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:b0:bf:f7:df:62:c6:e6:7f:96:05:e8:99:
                    60:6a:7e:26:ba:d0:7b:95:77:e1:a6:c7:69:3e:ef:
                    50:8b:f0:64:cf:82:6f:9e:c9:ec:b3:9a:5d:45:56:
                    94:0e:8a:26:f4:35:df:fb:bb:39:d0:92:62:91:c8:
                    0a:b2:fe:5c:0c:42:2f:14:0e:a9:c1:9a:cf:1c:ce:
                    90:7b:f6:c7:7b:19:45:90:3d:88:c4:1f:18:85:6e:
                    3e:0e:b7:11:82:d3:61:e8:9c:2d:d0:c2:2d:3a:20:
                    7e:d2:96:f8:fe:29:4c:96:f3:27:9a:f4:d2:db:c6:
                    89:dc:da:4c:88:1c:fc:1f:1c:6d:b7:40:38:f8:97:
                    26:af:6c:e9:85:bf:6b:a2:c4:da:22:fa:85:c2:eb:
                    07:0c:eb:ef:6f:db:25:e2:b8:02:6e:a1:ec:50:e9:
                    58:76:ba:8d:33:c1:89:61:f2:11:e8:ef:66:3c:6e:
                    a7:43:3c:01:89:cc:8f:e4:81:68:cc:09:cd:c9:b0:
                    d5:65:ba:6a:b1:7f:65:83:ad:7c:d1:c2:88:d7:ff:
                    7a:82:f0:2c:57:5f:c6:48:ac:72:80:dd:20:b1:5d:
                    f8:9a:e2:90:a8:bb:60:1c:62:2a:2f:98:2e:eb:38:
                    f7:14:45:1f:4a:71:ef:49:07:b6:3c:a5:f1:a9:0c:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7A:23:AC:B5:2A:A4:FD:79:F0:12:AD:9C:4D:E4:86:30:8A:D6:5E
            X509v3 Authority Key Identifier:
                keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:85:a2:85:76:9d:b9:25:42:23:6f:ba:b5:4d:38:60:78:14:
         e8:ea:32:e8:b4:62:dc:09:cc:3f:03:ad:24:f5:8a:dd:33:0d:
         7d:1a:37:75:62:24:fb:15:12:4c:e4:45:89:c4:f8:c0:11:7b:
         69:b1:43:5b:03:3b:30:b8:dc:1e:cc:b5:b0:96:4b:58:d5:0a:
         be:e8:c5:8c:c9:31:60:e3:d5:f8:54:f9:18:93:cf:1f:82:d5:
         47:d3:75:85:48:e6:00:f4:96:64:63:af:7a:88:c9:76:8b:ea:
         d2:b2:1b:5b:19:aa:a3:49:22:52:2f:f0:72:fd:5e:df:51:72:
         d2:f7:97:9e:a1:77:69:23:64:57:0c:0e:00:fb:15:8a:bf:17:
         56:90:90:01:5b:11:a6:99:3a:c8:4f:f9:f8:23:68:f1:74:d4:
         1a:ff:0f:31:63:04:56:c3:4a:c7:ac:64:1b:de:e8:be:4a:54:
         17:e7:75:88:3a:1b:97:69:37:95:7b:73:b7:47:4b:15:48:ab:
         fd:2b:08:28:c5:c0:73:0f:9b:3f:11:4f:86:c0:43:27:42:50:
         1e:c9:31:27:57:47:51:2f:69:09:ba:0a:a8:ad:52:33:db:53:
         1d:ff:8d:21:12:02:c1:ec:df:84:6c:0e:36:12:a9:08:90:6b:
         45:ba:3f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----