Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File:                     fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier:          r4Yaw97/pZ+cKcuDxbvyhLSKbKou1gaOVkB5OHg50ow=
Subject key identifier:   B7:C9:D0:C5:99:43:68:D1:88:4B:53:88:C9:47:B1:88:22:95:71:74
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer:       /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial:       01962E619A378E66A7A463CE80EFAE38B0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number:          0A4B
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: Z+1bZVKZPXLMbXNru6CdNNQFbpPrRbX7TJszgE4Sibg=)
                          2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9a:37:8e:66:a7:a4:63:ce:80:ef:ae:38:b0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9656d5867b43ce506445290bba705722260586
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=b7c9d0c5994368d1884b5388c947b18822957174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:22:76:aa:4f:a3:33:7f:4f:d2:56:1f:80:
                    e7:08:4a:23:eb:1e:b8:dd:a8:72:59:14:21:3d:12:
                    c3:7b:54:a7:61:60:32:61:77:7c:05:d0:97:02:7d:
                    0c:37:75:06:87:c9:5e:ce:c4:04:8f:a7:28:5a:ea:
                    a3:6e:04:86:36:71:b2:7c:56:26:7d:ad:be:3f:7f:
                    3a:c2:a1:da:f9:e7:04:e0:c0:aa:3c:c3:0e:d4:eb:
                    21:3d:81:f5:c8:0e:1e:89:04:55:51:f6:54:65:fa:
                    84:16:7c:6b:d7:2a:6e:2f:0a:5d:72:39:6a:5f:43:
                    a0:85:39:da:84:08:f0:55:45:47:00:95:ce:d6:53:
                    65:03:17:bd:c9:c4:98:0c:fb:b5:24:9d:96:ba:43:
                    69:c0:22:1f:fd:54:71:a4:37:f5:f4:32:3f:ab:7c:
                    c1:09:05:7e:c1:9a:a8:44:60:4a:ea:d7:11:74:ab:
                    3a:fc:fe:46:92:6d:cb:79:e7:68:ad:1d:e6:5f:85:
                    f9:42:a1:b5:37:91:7f:e9:48:b1:cd:b5:43:6e:47:
                    98:57:32:11:53:af:07:95:06:a5:44:8b:68:2b:4f:
                    a3:00:0d:d9:30:ae:dc:f1:0a:0e:53:9f:2f:69:db:
                    6d:69:e0:67:4e:19:e7:93:0f:1a:0c:ae:5c:e3:3f:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:D0:C5:99:43:68:D1:88:4B:53:88:C9:47:B1:88:22:95:71:74
            X509v3 Authority Key Identifier:
                keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:7d:6a:b0:a5:da:29:aa:69:3b:d5:4d:08:53:a5:21:35:
         45:8b:37:0c:f5:67:c9:64:c1:5a:c6:fb:9f:46:e1:1a:96:95:
         c4:ec:07:d8:b4:44:26:4a:de:f5:fe:e1:ce:1a:16:2b:20:5e:
         f5:e7:8a:ec:86:25:9f:62:be:70:71:d3:2f:f6:0e:ad:c4:aa:
         23:6e:75:9d:7e:9c:60:e3:4a:d7:aa:e2:ae:6d:76:c8:9e:8d:
         6e:9a:21:23:c2:ed:fd:03:d9:3f:3a:08:1f:1a:c3:c5:a0:b8:
         d5:74:18:04:55:44:dc:ff:0d:7d:40:2a:e4:b6:2b:96:34:24:
         7d:b4:f2:17:58:d7:7a:5d:a8:71:dc:3c:f4:db:a4:d3:3d:87:
         a2:1e:3a:a6:31:dd:e9:ea:fb:20:fe:b0:30:6b:28:d3:a5:6b:
         13:a1:b5:77:3f:5e:ae:f4:a7:57:5c:1e:19:c8:ef:e1:d3:d7:
         07:37:51:31:4f:64:71:de:89:68:23:97:47:a5:67:30:cf:5e:
         e8:23:39:75:5b:73:b9:5d:ae:8e:b6:51:13:0c:40:b0:52:b6:
         96:a6:ff:75:0d:f8:96:25:19:3f:ba:66:13:40:ca:a4:3a:d3:
         84:72:83:b5:36:48:46:c1:11:6c:35:e0:49:b6:ad:bd:2e:c2:
         40:ea:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----