Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File:                     F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier:          ZUMjjKL+lDxPLFS3AH2L32I5Rm+Lhljj75UDHDJ1SQs=
Subject key identifier:   F8:F5:D3:89:2D:1A:BF:5C:F7:A4:52:EC:80:95:C8:BF:5F:23:09:16
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer:       /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial:       01962F064389BF25DA1641D05C080D185090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number:          0998
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: HRrPp8XQrN6LuOqDlmIIHuZS4DWInhWuhCYLLLPxJEg=)
                          2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:43:89:bf:25:da:16:41:d0:5c:08:0d:18:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=f8f5d3892d1abf5cf7a452ec8095c8bf5f230916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:e2:ff:c0:52:db:ed:d8:c1:5b:9b:c5:2e:
                    f9:c9:d3:d1:c6:78:a8:56:49:de:e4:5e:7a:cf:ec:
                    25:05:72:72:7a:3b:6c:8f:34:1e:68:eb:12:cd:cb:
                    e9:68:34:02:38:96:7b:bb:6e:2b:89:81:c5:dc:70:
                    ff:40:bb:dd:cb:a3:91:b0:72:27:4a:4e:bc:35:dd:
                    6b:e1:b5:15:f0:08:9d:2b:ad:18:6d:bf:5a:1a:61:
                    52:8b:00:ef:44:91:98:c7:26:d4:34:51:86:6d:a1:
                    d6:85:70:aa:83:db:e5:59:6c:aa:f9:ae:36:19:d5:
                    09:29:23:ca:b7:af:b5:1c:ba:0d:39:7e:7c:1d:81:
                    88:7f:00:44:ac:69:05:2f:0a:60:67:1e:3e:eb:b3:
                    cd:42:0e:81:ae:f7:82:13:ff:ab:00:a4:7f:1c:4a:
                    db:89:ec:51:ba:4f:a1:ac:88:67:16:f1:2a:69:fb:
                    4f:80:f2:f3:4d:b7:4f:a2:3a:69:6f:0c:d9:d7:23:
                    7d:55:be:5d:cd:64:1c:de:fa:cc:ea:e8:b5:1a:a8:
                    3e:75:aa:8d:74:ab:7c:38:1a:b3:30:3a:55:33:4f:
                    1c:3d:8c:bf:05:1c:86:39:d7:e9:62:5e:f0:69:06:
                    48:de:b5:66:3e:19:3f:03:5a:01:e2:29:d8:a2:44:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:D3:89:2D:1A:BF:5C:F7:A4:52:EC:80:95:C8:BF:5F:23:09:16
            X509v3 Authority Key Identifier:
                keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:98:02:33:76:91:73:e2:6b:79:b2:23:14:2e:ac:7e:55:f4:
         5a:5d:5e:63:47:6f:6a:9d:92:a8:8e:fb:9b:32:b9:29:7d:c0:
         db:a5:ea:75:95:6d:35:fa:d3:06:4a:97:f9:d1:fc:41:e7:35:
         90:f8:aa:13:5d:ce:c9:92:0f:03:05:16:15:e7:ea:b7:12:80:
         cf:55:10:dd:86:a0:9f:ab:d9:05:c5:80:22:31:e7:9f:fe:82:
         12:1e:17:09:13:1c:93:4e:29:2c:6c:ea:54:18:fe:8d:8b:3f:
         c1:13:43:5c:bc:6d:f4:00:56:9d:de:a6:7d:b9:47:90:56:ed:
         8b:c6:4b:75:02:c9:7a:5a:42:a9:c5:ca:35:47:30:ed:c9:7b:
         3c:af:96:86:c0:b5:d8:d5:f1:d8:a3:e5:c9:fc:8c:63:57:2a:
         8e:95:78:bd:78:0e:70:7c:24:be:d5:b8:ab:5f:ef:38:94:c9:
         af:3b:46:90:0d:8a:4f:55:e0:0e:8f:4d:f7:19:3b:2a:86:f2:
         04:51:5e:2e:2b:f7:4c:07:94:2e:33:15:9e:d4:2a:b4:30:33:
         03:50:07:62:5a:99:60:67:a4:9a:cc:cb:e8:0a:d1:dc:6b:7d:
         e1:94:11:fc:d2:9e:90:7e:f1:a3:9d:96:ed:4d:81:e5:5a:2c:
         6a:c1:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----