Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          3sicK62wZpNBjruPQ3FAbkpVTjBtTMY93KwRu8sLJ7M=
Subject key identifier:   3C:3F:F3:84:D8:67:58:84:A5:7A:AE:2F:48:4F:F9:16:54:26:34:25
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       01962F3D3CD507B958B9DCC6C3005D78A507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: 9iOQETt1zdFgS25V96B8K7CfRDuXyyRAEkwfDdNBno4=)
                          2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3c:d5:07:b9:58:b9:dc:c6:c3:00:5d:78:a5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=3c3ff384d8675884a57aae2f484ff91654263425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:be:b4:0f:bc:04:e3:78:fe:26:a5:b9:fa:
                    21:ed:ef:2f:75:97:f9:05:74:05:6a:18:f3:11:be:
                    2b:ef:6e:e3:73:66:ff:5f:bb:eb:b4:7d:4e:40:94:
                    dd:de:fb:c4:23:12:fd:f7:73:96:df:05:bd:c5:97:
                    9f:c0:2b:15:ff:fd:98:4d:2a:ed:09:eb:16:ab:3d:
                    e4:08:5b:6d:f9:94:67:f4:ca:84:18:7a:0a:56:4e:
                    13:fd:39:be:ce:42:54:55:a5:a5:e7:95:a0:68:05:
                    7b:dd:64:ea:92:8e:c6:e3:d0:df:13:c9:dd:16:4d:
                    a8:c5:53:d1:30:01:f5:db:79:ce:31:58:2a:14:97:
                    86:1c:37:27:5b:af:00:31:00:1c:77:05:23:d0:30:
                    60:b7:80:f1:95:b0:a1:57:90:da:c5:10:a3:f2:ab:
                    d4:92:d2:84:46:db:0c:6f:3c:74:74:71:62:c1:dd:
                    5c:9a:06:70:bf:cb:5a:76:4b:c7:58:68:79:0c:45:
                    12:87:43:1a:41:78:5f:b5:cf:13:24:20:bf:f3:7e:
                    6f:30:c7:40:ba:ce:23:b0:06:4e:65:b1:ac:5a:d6:
                    2c:24:e9:38:05:9a:2e:a3:25:0f:b0:45:0e:77:d9:
                    39:7c:ca:54:cc:12:20:04:2a:ae:37:81:a9:05:ec:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:F3:84:D8:67:58:84:A5:7A:AE:2F:48:4F:F9:16:54:26:34:25
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:09:3b:98:75:45:fc:ca:2c:5a:26:a1:ec:90:86:70:b7:be:
         5f:c7:8e:0f:e0:d7:8c:82:f6:8e:71:41:04:50:58:59:97:a9:
         66:75:f0:5a:99:0e:1c:b4:57:d2:11:ca:41:8a:b0:06:bc:95:
         a4:c0:4f:10:a8:2f:5b:a5:88:00:dc:e1:fb:02:14:db:5d:40:
         c7:9d:54:21:a6:01:f9:b5:6a:40:af:e1:e6:de:10:ed:9b:e1:
         71:f4:b3:ec:58:0a:89:f2:31:55:4a:4e:84:95:44:b6:6c:83:
         58:2d:3c:6c:de:7f:29:b3:12:4e:78:13:04:c3:ac:15:c1:77:
         20:b7:92:d2:78:1f:eb:8b:7f:f4:81:32:a0:09:52:b0:00:8b:
         e2:7d:15:91:ec:4b:56:fa:54:0e:3d:98:de:54:fb:9c:f1:7e:
         d6:bf:d9:1e:8b:db:03:ec:74:15:49:18:b0:48:43:66:88:05:
         4e:88:f1:07:86:62:1a:7a:52:d5:92:a0:bd:16:64:a7:88:96:
         01:06:8a:19:4c:94:10:dc:f0:4f:f0:e1:ed:35:0f:2d:9a:54:
         06:e1:66:34:30:03:9b:5e:6c:fa:c9:5a:15:3c:b0:33:77:c5:
         9c:7c:95:d8:4e:41:c8:c5:b0:7a:d5:b1:7d:9f:2c:40:ae:13:
         56:82:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----