Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File:                     frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier:          5ADszLkSJhlSohbFXePZVI66FNwC1iO2Wi7Q7UxUNX8=
Subject key identifier:   5B:11:25:6E:17:D6:10:AE:35:6C:3A:1B:A3:5B:7D:E1:52:6D:EF:BE
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer:       /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial:       01962F7461B6BF0A16C887A896DF7F8C7BB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number:          0891
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
                          2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: 2snF2f4rdWOLla4o2nnx5PN5O+/8eonRwOroWL9QOl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:61:b6:bf:0a:16:c8:87:a8:96:df:7f:8c:7b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=5b11256e17d610ae356c3a1ba35b7de1526defbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:89:73:84:7b:c1:c2:bf:18:65:51:74:84:
                    cf:b5:22:88:12:5a:9b:f8:3f:f4:79:dd:8e:d1:e8:
                    b2:21:62:c6:43:fc:22:16:c7:67:c7:3b:1a:f7:a3:
                    69:8c:c7:e6:33:c2:f5:1c:36:60:2c:74:73:07:ac:
                    b8:05:c6:f0:66:81:28:6b:00:cb:9e:5d:f9:f7:e8:
                    3b:59:8d:b1:11:71:9a:5f:e9:86:7b:47:87:3f:03:
                    3e:aa:2e:50:62:52:56:c1:63:5b:2e:0d:5a:48:28:
                    bc:62:de:ba:95:a9:6c:c6:7e:ad:9d:da:a4:21:d9:
                    d2:84:3b:bd:05:c4:16:50:96:24:e5:fb:10:2b:e4:
                    bd:62:5f:a6:13:a6:5f:2f:ed:c5:d5:f5:6a:d4:b9:
                    0d:4e:4d:cc:5c:01:e1:c8:3a:e5:ff:cd:d4:8c:39:
                    20:38:b9:63:7a:1d:76:fa:6a:09:40:c7:d2:52:65:
                    b5:e5:e5:a4:be:29:63:9e:d4:3f:7e:15:9b:48:bf:
                    10:95:67:a5:75:5b:bf:93:52:96:03:e1:74:6d:61:
                    19:a5:41:41:03:cb:d7:b1:ca:8b:d9:78:49:e6:7e:
                    a4:ee:ac:97:9a:f3:b5:03:b5:1c:4e:63:7a:af:86:
                    2f:0d:fb:b3:a6:26:9b:20:4a:f2:17:6c:be:ac:83:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:25:6E:17:D6:10:AE:35:6C:3A:1B:A3:5B:7D:E1:52:6D:EF:BE
            X509v3 Authority Key Identifier:
                keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:93:05:7b:89:2a:f9:0f:50:62:cd:ad:52:9c:fc:be:ba:01:
         e9:0d:28:cc:bc:88:2b:0c:ae:16:87:9e:e8:76:3f:37:65:8a:
         a3:b8:ca:0c:86:0f:8d:f3:03:3f:a8:e2:c1:8a:41:5a:18:5f:
         3d:2d:90:37:6c:e6:3b:87:ee:0e:58:1b:a9:b6:c7:b4:8d:d0:
         bf:2e:34:2a:84:d8:d8:85:9b:d5:f2:8f:8b:62:ab:b4:00:a3:
         b9:f1:06:da:7c:bd:e6:81:e6:da:da:7c:2a:4e:74:9a:84:bb:
         22:f1:59:2b:60:49:12:ce:cb:61:e5:39:c5:86:f4:b2:91:30:
         de:07:93:c6:76:6f:dc:b8:cb:14:e7:a2:d2:d8:26:10:ef:bb:
         89:e5:b8:f5:eb:11:31:6d:a6:01:0a:66:79:1c:11:a2:00:47:
         61:f1:65:c9:8a:fc:b9:3c:20:66:6d:26:64:42:18:7c:8d:98:
         72:cc:48:2e:bd:4d:8c:d9:3a:46:aa:af:bf:e5:1f:14:ba:3d:
         71:1e:01:44:b3:94:95:38:59:3f:71:2f:95:89:56:ba:a0:4a:
         ac:28:c8:a7:68:9a:a3:26:d0:32:72:33:e8:e5:b0:63:20:3d:
         21:b9:ce:53:7a:0a:5b:e8:eb:b8:78:83:ec:f9:dd:3c:fa:c4:
         9b:b5:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----