Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
File:                     FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json)
Hash identifier:          hdKAwTf4xM/WT0EJsC9eLeRHUCRQnJtTfLaPEs4PGK0=
Subject key identifier:   61:13:3D:D6:ED:45:0F:F9:E0:DB:06:42:17:BC:1F:33:DB:3F:7A:C4
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Certificate issuer:       /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial:       01962F0726CE35C479327E50B2080F30EC5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
Manifest number:          102F
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: 2ljAQ/Qq5+JLeKDgjUbatelwm7WRjphMCTqomSceXJQ=)
                          2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=)
                          3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:26:ce:35:c4:79:32:7e:50:b2:08:0f:30:ec:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=61133dd6ed450ff9e0db064217bc1f33db3f7ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:33:11:60:07:a8:d9:3b:99:36:48:b2:3e:
                    48:1f:c9:c5:fe:fb:fc:2f:b9:08:7b:27:42:f5:96:
                    c3:65:79:3e:02:95:0c:79:c2:a4:11:43:02:a2:d1:
                    cb:f4:75:38:7d:de:36:0c:a0:f8:f9:fa:63:e2:df:
                    7b:6a:84:bf:34:e6:4a:61:cc:29:16:d7:b8:7f:c4:
                    e1:bc:97:15:b9:cc:30:d6:2b:a7:ca:28:3a:0e:4b:
                    ed:ed:07:54:c4:c3:cf:c0:f5:90:ba:d1:8c:47:39:
                    b4:ac:8f:36:2a:42:11:51:30:14:e1:4a:65:21:7f:
                    3b:7c:0c:ca:22:2f:af:3a:15:61:58:81:18:51:39:
                    32:8c:f0:77:40:5a:3a:13:8d:a0:c9:75:77:d3:a0:
                    3a:92:a7:9e:f5:ae:88:3d:7d:94:d7:3f:4a:28:0d:
                    df:fd:dc:d6:de:a5:90:3a:8e:db:e1:b6:8a:f8:d2:
                    75:a8:95:64:81:c4:8c:12:e7:6d:9c:5d:3d:19:a5:
                    b5:66:8b:ac:9c:e2:a1:1b:d5:0f:aa:21:51:4c:5b:
                    68:00:bf:49:7f:94:0c:58:5c:8a:41:b3:d9:f6:c7:
                    23:4d:ee:66:6f:fa:49:3e:bc:a8:0f:f9:d1:5a:e5:
                    80:88:87:ab:4a:42:e4:79:bb:c6:dc:a4:ad:b7:a8:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:3D:D6:ED:45:0F:F9:E0:DB:06:42:17:BC:1F:33:DB:3F:7A:C4
            X509v3 Authority Key Identifier:
                keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c0:0b:8f:20:e1:88:e7:c0:20:84:6e:82:54:e6:16:c5:61:
         7c:a0:0d:6d:1b:b2:68:13:ce:9f:eb:ad:3c:91:01:07:cd:07:
         bc:43:4c:bc:69:7a:4c:82:68:05:8e:67:bf:1c:d9:89:c3:d9:
         39:06:60:f2:ed:44:0d:c5:d7:5c:e0:7c:69:4b:ea:66:ef:7f:
         a2:3a:d4:c0:fe:48:56:38:22:5c:39:06:7f:73:9f:ae:9b:f5:
         65:df:7a:d1:2d:14:9d:34:c0:10:69:bf:6c:87:5a:38:d2:9f:
         4d:d7:c0:2a:06:ac:a9:3a:d3:12:00:54:d9:7f:19:40:ea:84:
         f3:84:9c:f0:9f:73:a9:49:30:b8:a6:3c:e2:70:9c:9b:34:a5:
         ac:fb:e0:05:62:74:68:6b:53:b1:68:90:d0:6f:d6:8e:33:49:
         1a:32:47:40:fc:31:a6:8b:8a:b9:17:54:d7:3c:35:7f:08:8b:
         bf:db:ed:34:ec:19:42:f2:13:9e:85:81:46:c6:8c:dc:1b:e8:
         53:96:8a:ea:6c:8b:87:18:41:b4:54:1b:ba:e6:73:ad:b2:c2:
         48:87:45:c9:7f:1b:5c:33:65:5a:c2:7b:dd:15:3d:80:f1:51:
         7e:cf:c7:30:bc:ba:be:c0:33:17:e8:1c:f9:aa:69:5f:3c:76:
         88:f7:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----