Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          bXG2wr7rPdcDbvW2pYUENqgsoiXQSYdBFeShFhPhMGk=
Subject key identifier:   85:31:FF:17:57:7E:CB:A0:0B:B5:0E:75:7F:37:F2:C7:A5:2B:81:35
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       01962F073D2C8111D4FBD08DC7C4D18D2D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0ADD
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: qRPTY2DN/lEiO413IFOytX/gyBwTqi+Q7bAsA/IVi4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3d:2c:81:11:d4:fb:d0:8d:c7:c4:d1:8d:2d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=8531ff17577ecba00bb50e757f37f2c7a52b8135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:92:f5:e3:08:e6:bc:15:cd:d2:da:d4:17:
                    d8:ff:d5:71:24:84:81:9e:a4:16:e5:e3:ad:ad:f6:
                    c7:b6:f2:16:3b:b6:c3:e5:20:6c:47:b0:97:1a:85:
                    3a:23:05:37:d6:21:0b:dd:09:6b:1c:ef:be:10:26:
                    2d:37:0b:8b:55:9e:84:09:84:d3:91:b2:14:9b:78:
                    21:f0:b1:37:a5:f5:10:92:bb:a1:fd:82:a3:83:85:
                    fd:fe:c3:3d:8c:20:e5:8d:54:12:85:72:83:b5:d9:
                    29:5a:5a:e6:1a:fa:3e:3d:43:e1:24:73:46:84:a0:
                    ac:ed:3f:0d:70:bf:31:53:22:a8:f9:d7:a1:ca:56:
                    bd:fb:de:bf:d5:27:30:03:ca:04:66:27:35:e4:8a:
                    53:63:c7:ac:72:db:8c:63:60:89:9f:e2:14:b3:e8:
                    fa:5f:40:cd:f1:b3:e9:97:31:61:fe:e7:e1:d9:52:
                    7b:4a:b8:61:fe:40:ea:49:2a:f6:d0:bc:b4:17:58:
                    2e:4a:ee:52:e4:62:6f:46:15:2b:63:51:cb:9d:8a:
                    8f:30:2a:71:a5:1e:d5:e3:6b:1f:79:09:b0:9a:d6:
                    17:00:9a:7d:3f:55:c6:6d:54:c2:3d:7b:e3:a0:bb:
                    12:1c:c6:9f:78:fc:f2:1c:10:b7:26:1a:45:de:5a:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:31:FF:17:57:7E:CB:A0:0B:B5:0E:75:7F:37:F2:C7:A5:2B:81:35
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:d7:d4:40:21:83:a0:a9:1e:21:87:79:bd:c5:4d:b1:74:
         97:1a:0a:fe:bc:20:fb:a4:18:81:56:a4:17:f9:a1:74:3d:3c:
         35:b7:10:1d:55:f7:69:04:7d:24:c2:0c:89:a0:81:41:1d:4b:
         9b:5e:0a:d8:78:3f:46:6d:9a:f6:35:68:4a:f3:c8:99:c6:f1:
         fe:7e:a7:dc:75:f2:4e:b4:16:0c:86:e7:37:3b:5e:07:20:c6:
         0d:e6:48:61:30:48:1a:1a:6c:b1:81:d8:ae:5d:56:fd:53:34:
         bb:e2:cc:a5:5a:98:7d:1d:8c:d5:fb:be:b8:78:48:78:9c:2b:
         13:c2:9d:bd:5e:84:b8:21:7a:f8:41:0b:11:8d:bf:7f:9c:eb:
         51:a3:1d:d7:88:a5:20:e8:b4:a0:8a:a2:a3:50:a2:eb:3d:25:
         c9:ae:68:37:05:23:03:01:a4:a0:eb:f2:32:a8:ee:35:97:1f:
         26:fc:61:0b:02:b3:f3:67:e9:3c:86:64:7f:f0:16:78:ed:a4:
         6f:e5:35:14:7a:c5:70:93:e0:76:02:fc:6e:f3:82:89:b5:47:
         3c:8f:e8:d2:aa:96:e7:53:40:8e:f0:b1:af:bc:1f:74:87:53:
         28:37:ca:db:b5:0d:c2:65:0a:43:62:8a:74:c0:bf:94:ed:a5:
         73:a0:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----