Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          Cxn4XC6nuSZMD4fwbXGawZf8sCG/XAwzelwlaCn77J8=
Subject key identifier:   44:D4:D4:11:44:98:9F:15:CE:6A:CC:FF:FE:36:95:E8:9D:52:4C:82
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       01962F06F59A4C7F9A5E6FE14CBCC9548909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          020A
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: 0MiFfnJFzjXTwidxg02+7c1f5E7Pxzn9kjF3TrpeePM=)
                          2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:9a:4c:7f:9a:5e:6f:e1:4c:bc:c9:54:89:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=44d4d41144989f15ce6accfffe3695e89d524c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:37:d6:b3:62:48:92:55:7a:b9:2e:af:a7:
                    71:01:7c:d8:a4:ae:c5:07:30:dc:b5:47:d1:fe:ab:
                    5a:39:63:14:90:8a:4c:d0:f9:45:4d:35:c6:16:20:
                    84:67:95:b7:aa:04:1f:bc:99:56:b8:9c:6e:69:07:
                    31:10:0d:f1:5d:f0:a2:de:30:be:26:ea:02:30:70:
                    ed:0e:63:dc:87:35:76:37:c8:26:1a:15:fa:c4:e6:
                    67:30:8b:43:34:0a:7f:27:9e:3d:fb:82:b2:c5:c7:
                    bc:66:78:5e:a5:e8:60:af:4c:45:e4:b2:8b:12:e8:
                    2b:d1:77:63:03:45:c9:f3:25:03:2d:42:62:21:76:
                    14:f5:51:15:e0:60:d9:1a:1e:3a:7a:2a:6e:fd:8a:
                    7a:50:74:a5:ef:6c:84:15:e6:cb:26:7c:2e:dc:eb:
                    58:43:af:e4:15:ab:e2:f1:f9:20:56:4c:4b:b8:90:
                    aa:74:46:f6:1a:36:e5:7b:10:91:cc:12:32:55:d8:
                    7c:b9:bc:5a:d8:82:34:76:8c:b2:72:75:f8:f1:b9:
                    47:b2:99:57:bc:47:f4:cf:f2:9e:ec:38:69:3c:3b:
                    0a:f2:79:23:fb:f3:2b:d8:ab:e2:f2:fd:11:5e:a2:
                    f7:34:52:33:4a:e3:14:19:ca:02:a3:69:6e:2e:42:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:D4:11:44:98:9F:15:CE:6A:CC:FF:FE:36:95:E8:9D:52:4C:82
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d4:09:2e:ae:a8:a1:59:0d:6e:d1:b3:b0:c9:da:f5:66:56:
         70:a4:d0:f2:81:75:4d:71:41:fd:e7:55:df:b8:85:f5:71:b5:
         a0:f4:71:f9:58:07:22:b3:84:ac:2c:83:70:34:ca:94:ab:57:
         da:ee:94:af:5c:9b:1c:a3:ea:35:8c:f0:85:87:2d:5f:35:ae:
         2d:a8:c5:75:56:75:7f:da:fd:79:93:9e:af:40:82:19:85:81:
         26:83:9a:c2:7c:d1:f5:18:33:ae:87:63:df:41:09:a3:bc:ce:
         e4:24:45:f1:2a:13:36:81:a1:0d:10:5f:7c:8a:f1:6e:10:00:
         06:8c:e1:90:66:ea:6b:b5:bf:89:db:3e:42:34:94:52:03:99:
         06:2a:82:07:49:b6:8c:1c:23:b7:44:03:b9:43:bf:d6:4f:42:
         15:c1:62:bd:cf:49:aa:d8:d7:0d:1e:46:66:a9:13:76:a3:77:
         8d:9c:5b:d3:c4:a3:65:91:76:37:78:ec:fc:cb:b1:66:5c:a3:
         70:f3:38:b2:05:ee:2c:f6:9b:13:53:42:db:82:76:21:af:44:
         d5:30:f7:25:8a:cc:d7:2f:a2:d8:3e:3c:08:59:d4:c5:cb:8a:
         9d:b8:a6:71:6b:b9:cc:d4:a5:9f:ac:cb:05:b9:f4:57:8d:d5:
         2e:b7:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----