Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File:                     _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier:          GROC04XiYp5ZLjpdmS+8BcbqexvM+fehxfqixob3Dso=
Subject key identifier:   9D:BA:C2:7B:C7:0A:46:38:5C:DA:D0:46:A3:19:A1:6B:8D:7E:D9:60
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer:       /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial:       01962ECF7AF8F9983FF75F5522E41A400163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number:          0584
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: RdGYazcblxjw10A1GXBrScv2ZUw.roa (hash: cthxVd9Tm4tHhJQTv20dl7UKI0DsMHEY2NNEIm16wNQ=)
                          2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: stJyc+uoqdjpgGVMbVL4oY09lV7bydVFy6GDHcVnDeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:f8:f9:98:3f:f7:5f:55:22:e4:1a:40:01:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=9dbac27bc70a46385cdad046a319a16b8d7ed960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:84:20:02:b9:f1:f3:a7:be:c0:40:fd:0e:
                    90:8a:27:d1:a0:de:35:1a:14:05:ca:3e:04:88:bd:
                    1d:6a:dd:15:fc:41:9b:1a:6d:0f:31:e4:2a:e2:10:
                    1b:e6:b3:c7:33:1b:ec:44:44:00:e9:0f:e3:30:f3:
                    6f:8f:89:81:8a:92:16:a2:a1:bc:76:f9:a9:a6:f3:
                    98:db:46:c4:b1:4e:35:d9:4b:ce:51:87:48:b5:99:
                    de:fb:e3:d4:ba:4f:aa:cf:d7:40:0c:5c:cc:d5:cc:
                    81:b3:f6:20:33:13:e6:96:fb:f4:60:26:ab:12:ed:
                    67:18:90:00:70:61:89:d7:65:11:74:fc:c4:fe:2c:
                    d2:dc:f5:aa:80:14:ee:04:d0:a1:07:e8:54:8f:5b:
                    8f:ac:ce:36:c8:a2:f0:ad:bf:aa:43:38:d6:60:d9:
                    83:1e:e0:b0:5d:27:67:60:80:ef:10:69:9f:46:82:
                    b2:70:cf:82:b3:4c:fa:57:f3:a7:3c:30:87:9c:92:
                    a8:81:60:53:d6:bf:52:a9:ba:ac:fe:2c:99:74:17:
                    e1:46:b0:b9:99:c4:82:b9:2b:b7:1c:48:3d:52:33:
                    d6:91:8d:f0:de:5b:34:fc:6b:7f:36:18:70:ae:18:
                    4b:e6:e1:01:ac:ba:23:a6:4f:f7:b5:77:68:2a:81:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BA:C2:7B:C7:0A:46:38:5C:DA:D0:46:A3:19:A1:6B:8D:7E:D9:60
            X509v3 Authority Key Identifier:
                keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:13:9d:fe:2d:7d:63:7c:c6:ac:19:78:2a:46:66:84:d1:e2:
         52:75:a4:30:a7:19:3c:60:0e:4c:2d:30:ae:8b:e8:ce:70:05:
         a7:2a:32:4b:5c:12:7b:ed:d0:8b:c3:e3:17:9f:c3:61:9e:88:
         49:04:07:3a:e3:bc:f7:77:ff:d6:69:59:48:34:f3:b7:30:64:
         18:3a:67:5d:9c:54:83:de:73:cc:b2:fd:f9:1a:9d:ef:25:0b:
         b8:45:ca:e2:c0:44:c3:9e:fb:01:93:f7:c8:f2:e7:66:89:1c:
         eb:9a:4d:c7:ec:72:86:f3:92:3c:c7:ba:51:e8:60:fc:e3:68:
         7d:d5:b1:5f:79:12:3b:32:6b:34:37:d1:51:5b:32:b4:7c:ad:
         7a:34:9d:5d:b7:1e:87:ea:d3:96:08:a3:c9:9a:ee:18:6e:ec:
         32:3a:84:e1:c9:a0:92:fc:40:9f:90:96:31:de:37:68:f5:8f:
         bb:f0:c0:61:a9:ae:5a:63:15:fe:06:49:78:5e:c4:73:d9:1d:
         e4:52:5a:3e:c3:3c:2b:89:73:59:ea:b1:55:ec:91:2f:a2:fb:
         1e:0a:eb:45:ec:c5:36:e0:0d:6c:50:1b:35:26:5d:d7:16:32:
         03:95:ed:14:c9:b3:88:6e:c3:d6:dd:66:72:06:25:1a:4e:be:
         f7:0d:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----