Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File:                     1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier:          UTMx6nURDSC6NryXnMZVV+eqCdWXWmokJiBWODHAUrs=
Subject key identifier:   63:D8:B9:C9:48:4B:CD:36:83:79:35:B7:C8:CF:B6:0F:90:69:CA:E7
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer:       /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial:       01962E99932EDD70C316672F3401BDFDA7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number:          1305
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: ceFNMyQZPaZVb4hl+gL5b929aK6Rts2aaWCR0b2okuE=)
                          2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:93:2e:dd:70:c3:16:67:2f:34:01:bd:fd:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=63d8b9c9484bcd36837935b7c8cfb60f9069cae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:52:ce:ea:a0:86:b7:af:32:d5:89:10:a7:
                    25:e9:2b:40:c1:83:2b:5a:e5:d6:db:ec:4e:7a:51:
                    d1:41:0b:c6:84:a0:f4:05:80:e2:3e:94:ff:36:9e:
                    5c:93:97:3a:fa:89:89:76:11:15:8c:43:8c:87:6f:
                    b8:2a:39:0a:2b:1e:74:d5:d7:47:0e:6d:0d:2a:d4:
                    bc:4a:c6:f8:6e:8e:8a:a7:8c:a1:80:f9:e3:c6:b4:
                    79:f8:09:f8:e0:df:6c:f0:88:36:ac:02:cd:5a:b3:
                    0e:f9:ee:2c:a5:27:10:9f:82:c1:7d:e5:e9:78:9b:
                    5a:70:1b:18:76:1e:fc:37:8d:32:47:8c:b5:bb:e9:
                    63:dc:99:b1:f1:13:d2:4f:79:89:d0:5c:41:81:18:
                    30:92:74:16:f9:aa:4b:48:eb:5b:1e:d1:e2:58:d0:
                    42:b0:4d:83:cc:40:20:c1:bf:cb:2c:c5:38:3c:98:
                    7f:bc:b5:2f:ef:ff:b1:84:88:f9:0c:eb:0f:39:4d:
                    67:ac:e5:0b:b1:4b:05:7b:f2:01:0f:d7:aa:cc:56:
                    0a:b6:80:1b:eb:08:67:e4:db:53:0e:9a:ac:db:fa:
                    93:e8:13:18:7f:56:80:5c:d6:35:45:65:34:21:8d:
                    0a:7a:21:d4:c4:e9:b4:5a:b2:1b:5d:72:5d:e0:ec:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:B9:C9:48:4B:CD:36:83:79:35:B7:C8:CF:B6:0F:90:69:CA:E7
            X509v3 Authority Key Identifier:
                keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:48:e8:58:3d:78:86:1b:e0:da:30:29:34:04:28:10:68:
         65:b4:83:0e:35:39:ff:9e:b5:d4:3c:2b:9d:7d:17:9f:43:be:
         bd:ea:9f:63:e7:59:b9:d1:c1:a3:d6:ca:a2:f7:4a:81:99:71:
         15:d5:47:77:39:5b:9f:61:43:11:1a:f1:18:53:49:33:36:00:
         77:07:a8:2e:e2:4b:b1:73:db:01:ac:79:65:16:9c:25:bb:5f:
         f6:db:61:f6:2e:24:e6:fb:8a:3d:42:33:6c:47:46:c9:4c:1f:
         fb:45:62:7a:fb:1f:bc:18:35:17:b3:6f:ec:89:b1:a2:72:8b:
         38:bf:65:8f:66:fc:07:81:1b:d7:d7:f3:b6:48:15:26:28:ef:
         2c:8d:bc:d3:42:44:24:4b:44:51:35:ec:6b:a8:d7:1d:69:a3:
         b8:8c:1f:91:d0:6f:5c:cc:c0:23:b2:82:03:18:df:50:eb:76:
         44:d5:e0:a3:fb:35:f4:a8:a9:47:7c:ae:b2:6c:80:d0:58:22:
         35:3d:2a:4d:c7:ea:e5:7b:61:37:87:56:61:c2:52:bf:7a:1a:
         a1:ca:ac:49:08:bd:8b:36:d1:66:a7:d0:20:8c:ac:9b:39:0c:
         1f:65:04:53:55:c5:87:00:04:5a:c8:32:d1:f7:60:f3:39:a1:
         3b:c3:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----