Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          K0kcxX2XBveyWKRaa2aL3Z3aEf6UdJW93ivl2lGKn5s=
Subject key identifier:   FA:B9:9B:9F:06:FB:4F:F9:F1:B4:DB:75:F1:84:77:B8:C1:82:62:E7
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       01962F3DA4D1FB31586ECA2C4A812903802E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          13BC
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=)
                          2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: LkrYI2G6FtzUyol5Ol77dGB4p0N3MAQLCFQJATy14Pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a4:d1:fb:31:58:6e:ca:2c:4a:81:29:03:80:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=fab99b9f06fb4ff9f1b4db75f18477b8c18262e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:c5:19:6a:d0:36:db:b0:81:c9:d7:6c:d7:
                    44:78:7a:79:d8:89:8c:90:3a:27:d1:11:36:0a:b0:
                    79:92:18:ea:b6:1e:6e:d9:48:3e:02:24:a7:67:7e:
                    36:37:fd:28:c1:78:b0:a7:85:1a:24:70:ea:7f:6d:
                    47:8a:1b:e0:3c:79:bb:44:c4:ac:e8:29:30:56:09:
                    9c:80:db:2a:11:ea:2f:6a:e5:9c:69:e8:7e:6e:92:
                    b0:e5:9d:1f:db:0b:b1:38:41:c0:6c:8f:54:9f:c0:
                    c8:f1:a5:6d:ca:22:10:02:35:61:7b:79:7d:3d:c9:
                    07:97:bd:43:ff:bd:f1:28:95:39:1b:ae:e9:e7:62:
                    2d:ce:30:d0:62:0e:2a:e6:8e:b8:c4:52:f4:60:08:
                    cc:a2:66:73:d5:d0:2d:b4:64:ff:74:9c:03:b8:c6:
                    7e:72:d0:48:d9:60:f7:dc:8e:df:a5:87:b2:3c:94:
                    db:10:4a:be:24:39:95:6b:c0:85:80:38:97:2a:06:
                    c3:90:28:c7:9a:15:c7:ad:5e:47:ab:77:65:67:c9:
                    b9:d4:7a:4c:00:4a:35:64:54:e0:e8:3a:e9:12:6e:
                    06:42:4c:bd:77:30:fb:26:e2:d7:b4:30:f4:18:cc:
                    fd:22:28:87:ea:9a:8f:a7:4e:8d:37:ea:be:be:c8:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:9B:9F:06:FB:4F:F9:F1:B4:DB:75:F1:84:77:B8:C1:82:62:E7
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:ad:91:aa:55:cd:c7:58:c7:fb:18:72:6c:27:72:59:fd:
         55:81:84:47:17:50:dd:0b:6e:b4:97:46:7f:ce:2a:85:0b:8b:
         4b:0f:af:ba:75:d4:60:16:42:7a:57:90:86:66:de:9f:05:84:
         89:85:2b:5b:10:0d:bd:45:e3:d1:73:56:dc:f1:51:96:70:9e:
         ce:63:2b:15:9f:23:b6:1b:0d:c3:ad:fc:1a:1c:f0:e2:88:90:
         d2:fa:59:47:dd:97:1f:96:b9:2a:13:31:65:a9:6a:c5:3f:63:
         63:be:3c:34:e9:06:f5:71:e7:98:b9:57:98:c9:94:d9:b6:7a:
         9a:eb:2e:79:71:f0:73:8b:30:39:64:55:c0:52:c1:f4:95:4b:
         52:1d:a0:3a:4a:85:e2:aa:06:f7:30:ab:5c:0c:ef:ad:44:31:
         b1:ff:43:9b:69:9d:68:6e:fb:74:09:f5:23:61:60:2e:0d:5a:
         74:27:81:aa:ec:ce:30:58:87:aa:f0:79:cf:5e:80:fd:2e:8b:
         af:f1:cf:0f:7f:ae:0d:65:6c:3f:a6:59:6c:fb:b9:19:4c:aa:
         6e:0d:f7:c1:80:62:3d:19:b5:b8:b5:ed:cc:6d:53:a2:cc:b8:
         b0:53:f8:ca:7b:76:25:89:48:62:fe:d2:4b:66:b4:01:87:4c:
         91:bf:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----