Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
File:                     1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft (raw, json)
Hash identifier:          qCnBcWk3tCSmrSWo0KyMFcy3iRnvdhCfX/YZk9NKvgU=
Subject key identifier:   08:F3:DC:10:73:C6:84:D2:D6:0B:E7:1F:E4:07:AF:20:FD:7F:CC:E0
Authority key identifier: FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14
Certificate issuer:       /CN=faf814df8575986dd904a98687583c138768a114
Certificate serial:       01962E2AB886E36C49738318E88C70E709DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft
Manifest number:          0F85
Signing time:             Sun 13 Apr 2025 08:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:13 +0000
Files and hashes:         1: 1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl (hash: ou1cLH6VpQwS5T6Kk7ZJTXdLxV6niGxJG8usQNzwBwI=)
                          2: PSDe4mK_6sDHN2_ikwrsB7r4x8E.roa (hash: +rSMz15QPdcNrfCJaZ0raaYeAdhGu+UnOVTPQ1q0l6Q=)
                          3: s5uswa19Uff22iB-dXtqkkmV_rE.roa (hash: nIij+OFtE0vEkYeQJJWHSLDLEYsBsVEmFRZ+nuktJgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:b8:86:e3:6c:49:73:83:18:e8:8c:70:e7:09:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf814df8575986dd904a98687583c138768a114
        Validity
            Not Before: Apr 13 08:01:13 2025 GMT
            Not After : Apr 14 08:01:13 2025 GMT
        Subject: CN=08f3dc1073c684d2d60be71fe407af20fd7fcce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:a9:b1:ba:5c:b7:ea:21:90:1b:16:23:e4:
                    d1:b3:3c:0f:e5:d7:9e:98:b5:c7:df:b0:ba:b9:e6:
                    bb:26:9d:6c:61:90:08:f6:1c:54:c9:a1:f3:ee:24:
                    7f:74:6c:5b:02:3d:44:8f:ab:d1:1b:fe:dd:ed:79:
                    01:cb:cb:ba:ed:ca:85:1c:fd:4f:4b:ea:de:9e:41:
                    b0:3f:f2:83:07:8d:e7:ef:9f:49:69:cd:3d:e7:3f:
                    7b:88:db:33:0f:c0:ab:48:1b:2a:9b:df:d7:cf:f6:
                    ea:7b:23:7b:92:1b:ab:b4:2a:b3:d1:f0:94:e9:65:
                    1d:bf:6d:e3:fa:30:20:7f:fc:8b:25:d2:2d:62:88:
                    af:c8:01:24:90:18:7b:05:4b:7e:78:32:16:23:ea:
                    ca:ba:ac:e6:09:24:b1:13:c3:fa:28:ba:cf:35:35:
                    23:3e:fe:ae:33:17:25:e2:10:be:c5:e0:d5:6a:26:
                    7d:22:27:89:20:58:94:5f:96:6a:c8:68:f2:a9:0f:
                    f2:ea:6c:82:10:50:03:0d:38:c4:6a:c7:05:6f:df:
                    a0:23:b5:e8:6a:c7:1d:08:d1:22:38:a0:46:4d:51:
                    18:38:b1:fa:f2:14:53:b9:09:3c:4f:60:66:90:03:
                    c2:13:f9:f9:a5:a4:cf:32:58:bb:43:62:de:a9:8f:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F3:DC:10:73:C6:84:D2:D6:0B:E7:1F:E4:07:AF:20:FD:7F:CC:E0
            X509v3 Authority Key Identifier:
                keyid:FA:F8:14:DF:85:75:98:6D:D9:04:A9:86:87:58:3C:13:87:68:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/6fbbed-871f-485b-ad1a-46269d17e9f1/1/1-vgU34V1mG3ZBKmGh1g8E4dooRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:79:81:03:61:d4:c5:cc:56:76:30:e6:b4:1d:d2:0a:d4:
         5e:2c:24:90:8a:ad:92:55:97:81:ab:ce:5e:71:bd:08:d0:ee:
         b5:02:42:85:d0:74:5c:9e:1c:9b:57:9f:91:ff:17:dd:c6:85:
         a6:a3:d6:75:fb:a0:d0:ea:35:65:6e:0c:9d:d8:8e:5c:33:cd:
         7c:16:6f:3a:4f:0b:9d:ff:3f:f2:d6:16:b4:c9:fb:39:43:fc:
         36:fc:23:db:9f:63:7c:2d:28:db:8a:92:13:dd:8a:a3:20:8d:
         29:5d:97:19:77:3d:73:8d:92:b9:20:4b:bf:10:20:17:24:e2:
         29:d3:e9:32:27:c9:cb:2c:64:37:cd:f5:ac:94:a3:c0:3a:31:
         e5:92:1a:a5:bb:89:e6:d2:5f:73:62:a8:72:ef:b7:51:aa:cd:
         d4:a9:c1:b2:ce:2f:f9:a4:41:47:46:c3:f1:02:54:91:40:d2:
         5c:16:e9:ed:ec:15:f8:aa:83:24:df:cc:3f:f9:a6:55:39:0e:
         8b:4f:cc:3f:d3:8f:7e:08:b1:64:64:06:4a:1b:36:af:82:f1:
         aa:73:62:19:50:19:43:c5:b8:46:d3:26:10:d5:97:0f:ad:71:
         eb:23:7c:ac:14:8b:3a:37:15:b0:bb:86:3c:5d:c2:df:43:12:
         af:eb:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----