Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File:                     _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier:          fKBoqXTZzdui+PGgZ6otKVjFYe26sV7klrBlKMaCmfE=
Subject key identifier:   4C:0F:56:BB:FE:F9:73:5F:D3:2C:16:40:1C:77:CF:1D:77:94:BF:85
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer:       /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial:       01962F74BED5AF6CF727C00C59E4BDE10F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: 3/kCDtBsUnJlkxWCIY8mR5UgZt3MsuZTFuHKI54m+qA=)
                          2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:d5:af:6c:f7:27:c0:0c:59:e4:bd:e1:0f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=4c0f56bbfef9735fd32c16401c77cf1d7794bf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:cc:8b:45:7c:59:99:c5:2a:f1:9c:b3:c4:
                    a3:c4:26:a6:be:08:5a:fb:a8:76:77:c4:f5:84:33:
                    aa:ad:a3:e1:96:e9:75:87:21:3f:a0:e4:46:14:19:
                    b9:8b:79:ff:43:7f:87:b5:4b:e8:29:9c:b0:08:e4:
                    d3:3d:49:30:a1:f2:2c:b3:15:6d:87:7f:eb:7b:0b:
                    eb:08:5c:94:44:24:cb:0a:d4:3d:a8:c5:17:f6:2d:
                    fc:9f:ca:21:fe:1b:77:39:f9:69:c1:c2:ce:29:e6:
                    bd:83:71:27:60:a5:df:35:1d:7a:ff:01:1f:13:39:
                    42:ba:27:22:7e:c1:30:21:bb:99:a8:43:59:af:4b:
                    cb:c0:0c:29:17:0f:cf:3b:f3:a4:6f:5a:46:13:20:
                    ad:44:8e:a0:1f:fc:ba:4a:35:e1:38:02:82:4f:47:
                    f7:4b:6d:18:10:85:99:a7:1e:fb:6f:c7:cf:ab:fb:
                    2a:52:7c:f7:ee:93:db:16:d0:fe:de:5a:11:e5:72:
                    7a:ea:9d:20:62:01:a4:c7:96:b1:1e:24:c0:49:79:
                    d3:2e:7c:63:99:dc:e6:7e:9b:09:a5:b0:6a:8e:73:
                    d1:76:fc:a6:46:58:b9:ae:14:de:b0:14:97:c4:77:
                    9b:86:6f:a4:9b:99:5c:a5:b0:ad:d7:df:6c:56:46:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:56:BB:FE:F9:73:5F:D3:2C:16:40:1C:77:CF:1D:77:94:BF:85
            X509v3 Authority Key Identifier:
                keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:70:09:12:69:f6:06:f2:a4:c8:a5:f8:16:37:4c:fc:a6:
         2d:0b:73:5b:be:90:15:de:92:ce:2e:03:fe:c4:02:d2:c1:ab:
         d0:ac:12:84:5c:8c:bd:d1:a1:26:01:a3:f2:3f:6c:19:7a:6e:
         3f:12:b7:f8:10:f1:6d:38:54:cc:11:a6:78:3a:58:4e:6d:b9:
         b6:29:4a:af:ed:9a:71:33:50:df:db:a2:1a:e6:d5:e2:b2:54:
         fc:78:2a:14:44:cc:83:50:34:a9:1e:b8:19:95:3b:d9:c4:97:
         b6:76:86:fa:17:d8:14:8d:2d:60:1b:08:01:96:e6:cd:10:ed:
         9c:f5:11:a8:01:2e:ea:b7:12:9e:75:4e:a4:da:2e:88:24:f3:
         f2:13:0f:db:57:c5:e4:a4:d7:06:4c:ce:f8:4d:b8:d9:11:b5:
         aa:91:f2:55:e9:82:3f:d6:54:e2:bc:94:1d:9f:9d:b4:d9:6f:
         18:d1:2c:2a:e0:81:39:bd:24:ec:f5:9a:d9:fc:36:5e:ef:44:
         f7:d5:ee:ee:d3:04:42:46:3f:86:c5:97:d5:da:99:ca:bf:2e:
         14:c9:f1:08:4c:d9:64:fc:fe:21:99:e3:4f:57:6b:ea:89:64:
         62:19:51:9c:d6:b3:1e:e3:99:35:74:68:3b:f0:cd:48:38:85:
         f9:86:27:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----