Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
File:                     _neeViOLby6gaO3k4grvAMkEEys.mft (raw, json)
Hash identifier:          FgRf1apVrosNDGynvRQdtLiWo4v7vWMOh/ifuYexky4=
Subject key identifier:   5C:12:A5:77:AB:80:5B:37:F8:87:B6:A6:01:3C:D8:43:76:4C:E6:C8
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       01962F3D581D26A1D4001CDBCE2E71A84C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
Manifest number:          11FC
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (hash: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=)
                          2: Anmto90Z9g3pcSYFUNggSKUfX38.roa (hash: 3ls1WfKkLLzWNGOmnZTjqfHi7SxgoXvBGgCXTO5fmJg=)
                          3: LPzeUoKKbtBniuOIqj8nJU_M67E.roa (hash: BXGvnjHmSyIsPAZUo8glr5Sei8gWA74Tz3aN6uo9z9U=)
                          4: MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa (hash: 8EC847pBFpPj5yw0TCwh/bnYc5VOWtL7236chIzY3r4=)
                          5: _neeViOLby6gaO3k4grvAMkEEys.crl (hash: ddtY2FCV6zf1zwvwUXPTlAldEeTU5141UVjT1wgoevM=)
                          6: kITElgml7RZxWNr4eKfvM1E5VyM.roa (hash: mYphYuWKa2oClwokItjP8xyLuFG6crqS5Vudhf5XeTk=)
                          7: koZdUg9eyaaGc1g9ur5UXBYavrc.roa (hash: GaEJ7CaaD7TlL7BrSl+zzHjmdcf3ad/46vcHTxYsYGE=)
                          8: zsj7ZU7c27fACndp52_vAKfImfU.roa (hash: VK3pf67Xdj80z42M9vc+h8UO7pmF3OLN63Yl3j4PoPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:1d:26:a1:d4:00:1c:db:ce:2e:71:a8:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=5c12a577ab805b37f887b6a6013cd843764ce6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:80:c9:a5:02:78:95:7e:18:14:8a:c4:79:
                    4f:1c:9a:7c:7c:98:af:d5:ea:d3:f9:95:1f:4d:01:
                    a9:97:64:e5:b7:20:eb:76:3e:10:78:66:7e:1e:23:
                    5b:cc:31:a0:d5:49:57:40:4b:27:f8:df:d1:d1:4c:
                    d6:2c:d5:8a:6b:98:9c:e7:31:a8:d4:d1:fa:dc:4c:
                    e6:d9:30:9b:8d:a7:bb:3a:db:16:42:51:34:86:85:
                    b3:47:4e:60:4e:64:fc:12:d7:5a:2f:ef:9b:92:a1:
                    45:ec:1a:91:ad:fe:16:35:3d:b4:be:09:20:38:a2:
                    ff:e5:cd:eb:40:30:d4:37:8d:3a:cf:b0:5b:05:1c:
                    80:10:03:87:b7:b4:54:e6:e4:aa:80:d3:7d:e0:7f:
                    ed:e6:44:bf:db:20:15:b0:4a:4b:77:ab:09:af:b6:
                    ff:44:0b:ea:18:e3:f4:7e:0c:ac:ce:22:b2:88:10:
                    d8:5a:9a:ec:6e:88:4f:e6:ab:6f:a0:b8:4c:04:cc:
                    a7:64:30:f4:14:99:66:22:f3:88:52:8f:85:4c:7b:
                    74:89:46:fd:a0:78:22:42:a5:96:7b:df:65:e6:87:
                    c0:e1:78:2d:5f:59:6b:19:ee:84:47:a9:15:91:39:
                    e7:89:ae:8b:5a:00:c1:9f:6b:f5:62:45:5b:75:2a:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:A5:77:AB:80:5B:37:F8:87:B6:A6:01:3C:D8:43:76:4C:E6:C8
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:03:7a:70:28:81:a5:4f:08:95:0e:b4:48:50:5d:0a:b6:fc:
         4f:b9:0a:75:29:c7:38:32:04:94:7b:bc:50:73:55:c7:1b:3c:
         72:f5:fe:ba:36:57:a7:4c:58:c5:b9:39:2c:a3:e3:fe:a1:00:
         1a:9e:44:33:d0:b1:e9:78:b8:4b:b6:0a:d3:b8:41:96:77:b6:
         04:3e:6e:11:23:30:ac:2f:0d:2b:0b:d9:de:3f:a4:6f:22:27:
         6b:d0:98:51:58:87:dc:7b:17:a7:aa:e3:15:4e:12:c6:b9:e2:
         ab:da:07:f1:f0:7f:e8:31:c8:71:e2:ff:f2:74:0e:cf:07:ed:
         bc:e3:cc:0f:f3:c7:14:37:b0:7e:31:99:47:d6:03:00:27:18:
         e5:3b:d7:b7:76:95:d1:5c:33:07:91:01:1e:7f:2b:67:06:a0:
         c0:9e:c8:cf:de:62:9a:38:06:ec:e0:d4:da:7e:b9:07:fb:8c:
         33:27:1f:04:8f:e9:17:85:52:ec:ec:e2:73:2e:08:4a:39:a1:
         0a:90:88:e4:66:9e:c0:40:ad:f8:cd:cb:15:89:19:75:d5:05:
         a5:70:6d:f2:da:3a:de:6d:d5:f5:2c:c1:fc:e2:bd:7f:b4:f9:
         8a:cc:d6:47:90:60:e3:8b:fa:54:72:ab:59:61:95:1d:6b:7f:
         e8:3f:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----