Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File:                     1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier:          m0NG+N4W8mNdB75WgZPdF6BWnh7xwzox5c9DsDXxRdU=
Subject key identifier:   2A:84:7E:CB:34:D8:83:DC:83:51:E3:45:13:08:35:8C:D2:BC:09:7E
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer:       /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial:       01962E986796758DF8324CB5A5416D3E2108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number:          1155
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: KyosAKjxX92yocSB8WHNFUypxtWsqkB7C1TI6ylZwno=)
                          2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
                          3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:67:96:75:8d:f8:32:4c:b5:a5:41:6d:3e:21:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45bab208653d4261ebf202f6036334119846055
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=2a847ecb34d883dc8351e3451308358cd2bc097e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:fc:e0:4c:8e:04:9d:43:e2:f5:b0:b4:ac:
                    0e:87:0d:3d:67:9c:1b:c5:17:e7:91:e8:57:f7:66:
                    9c:97:c0:db:55:42:84:56:77:36:01:0c:4e:1b:c5:
                    29:a2:86:d6:66:05:f0:2c:c1:61:26:4c:c9:32:93:
                    3a:e4:ec:ce:3a:cd:c8:03:0a:2a:db:3a:5f:37:c8:
                    ac:0f:50:dc:bc:9a:17:bc:e4:16:4c:35:07:09:37:
                    68:5a:06:bc:30:83:ab:9c:7a:ec:a2:06:8d:8f:4a:
                    f5:eb:8a:d2:35:d4:47:71:37:73:d2:d2:1f:b4:16:
                    16:62:7c:b0:7e:00:48:83:67:0a:44:00:5a:c7:23:
                    0a:58:ce:a6:d6:23:aa:19:ae:22:2d:79:c9:b1:65:
                    b2:bb:cb:7d:6d:b1:84:ea:0d:b0:d0:20:35:a4:b7:
                    d6:37:e4:bf:6a:4d:b3:0f:2c:8f:b0:40:c0:43:ee:
                    49:06:e0:6f:ee:5c:33:d8:b2:1f:95:e9:35:56:db:
                    27:ca:7e:7f:b6:cb:21:aa:3e:fc:a1:2e:71:84:ec:
                    7b:11:b0:13:8f:bb:e5:77:2e:f6:c2:ba:84:83:e9:
                    d4:2d:44:87:ae:d1:0c:94:f0:12:09:f9:4c:fb:aa:
                    77:3e:e3:3e:c7:c9:9c:d0:33:c9:da:79:71:ee:b4:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:7E:CB:34:D8:83:DC:83:51:E3:45:13:08:35:8C:D2:BC:09:7E
            X509v3 Authority Key Identifier:
                keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:fc:01:cb:51:47:eb:69:e4:c6:b6:bd:55:06:bf:42:a1:
         0d:ee:de:dc:a3:c9:9e:52:53:60:7b:f4:11:e3:4d:02:9b:c9:
         a5:65:9e:07:21:72:5e:86:ea:53:ad:c2:3b:c7:29:28:42:6a:
         a0:d1:71:3e:30:4b:39:1e:e6:55:f4:9b:88:a0:f3:6a:0e:f7:
         e8:01:a8:f2:cd:fd:66:9a:77:f1:50:c6:c3:aa:e2:6e:5b:5d:
         2d:62:08:f6:0a:30:59:7b:f5:f1:8d:ed:24:e1:9a:48:87:d8:
         35:d6:e6:2b:a7:32:86:ed:0d:49:9e:a0:b9:96:8b:7a:2e:7d:
         1f:03:ad:14:80:67:7d:cb:5c:17:41:c6:6a:bc:22:fa:de:79:
         da:d9:73:fc:86:66:87:b2:3d:63:8b:14:4d:7e:21:61:8f:04:
         88:76:3c:04:fa:e1:b0:39:e8:ec:1e:02:25:0a:88:b3:bb:fc:
         6a:8e:16:4e:d5:46:db:b3:3d:ef:fb:ce:69:6b:0f:54:67:09:
         f9:ee:11:9f:21:26:dc:87:cc:0b:ab:7b:8d:7b:06:ee:f0:29:
         a4:10:91:13:08:cb:5d:a1:82:a1:71:b4:e8:9f:02:45:67:b8:
         f8:30:b1:b6:3e:3c:80:cf:97:b3:9e:0e:b7:22:ae:8c:6d:13:
         ee:98:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----