Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
File:                     FW1wMw7FHp_x93J7F4HEenqapW0.mft (raw, json)
Hash identifier:          FOzgrlJ8Wbppgm3qoKjxvx0iTFq/HIWK3jcWS7luW30=
Subject key identifier:   40:01:21:66:0A:6A:A8:E9:15:BE:2F:56:BF:9E:BA:47:BC:FF:E1:B9
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Certificate issuer:       /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial:       01962ECF4FC660F6AC5BFA2ACD24C3ED923F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: FW1wMw7FHp_x93J7F4HEenqapW0.crl (hash: 1x51/x5TW6MONb1Vyn7FtHE/9dcdj5jazT+LyhX0QAI=)
                          2: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (hash: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:c6:60:f6:ac:5b:fa:2a:cd:24:c3:ed:92:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=400121660a6aa8e915be2f56bf9eba47bcffe1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:a0:2c:d0:d4:28:71:51:b5:01:99:79:c5:
                    d4:1a:c8:a7:8b:65:be:53:b2:04:a4:da:9d:de:31:
                    cc:66:99:4e:e2:d3:e8:11:72:85:5a:9b:d3:d3:86:
                    cb:39:2b:ba:a5:4a:81:4e:25:50:07:0d:8b:e2:ce:
                    89:c0:ec:80:51:41:b1:4e:07:be:37:88:74:f8:95:
                    b7:05:9f:a2:c0:65:4d:f3:d2:ed:1e:cf:56:15:28:
                    ce:23:a4:d2:40:70:ea:3d:7b:95:74:26:04:8e:2b:
                    c1:4d:d6:71:61:7f:78:8a:73:67:2c:9b:4f:e9:90:
                    3e:18:75:76:05:d5:6e:aa:6c:c4:ef:8f:ba:4b:8d:
                    e4:1d:a7:5d:c7:f9:08:21:42:cc:da:24:e9:dd:0d:
                    e8:45:9f:91:8e:3f:87:85:c8:04:77:3e:b8:0b:4f:
                    c6:f1:c9:5e:c4:e6:bf:7a:cb:29:09:3f:a4:74:3a:
                    4f:a9:82:e3:14:79:e8:c8:eb:1f:db:33:fc:4f:94:
                    11:5f:a6:11:90:fc:31:70:a7:c8:3a:68:46:03:c2:
                    92:ee:74:83:02:d4:74:10:38:38:11:e3:86:ff:ca:
                    8b:ae:db:1c:e0:c1:a4:5a:f2:7a:0a:6f:23:d3:32:
                    be:42:3c:19:2e:c9:45:55:0d:cc:ec:ce:f6:43:38:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:01:21:66:0A:6A:A8:E9:15:BE:2F:56:BF:9E:BA:47:BC:FF:E1:B9
            X509v3 Authority Key Identifier:
                keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:76:70:01:81:54:09:58:e5:a4:49:e7:6d:5e:93:e5:0a:
         34:4e:e8:ed:20:ff:25:fc:42:d0:1e:d4:58:a2:e8:5c:9d:d0:
         bf:04:ea:de:51:70:3c:a4:74:ab:ae:bd:53:57:5b:9d:39:c8:
         3d:35:ab:8e:c7:76:09:3c:bd:a1:1b:8e:8d:f3:90:b3:e7:fc:
         db:ab:c8:51:89:5f:a7:f3:ea:14:e3:04:d6:30:45:98:97:4b:
         be:92:a6:87:19:03:90:49:5c:fb:27:46:1b:d6:98:64:e6:a9:
         8b:92:36:af:8e:c3:2f:9c:24:37:b6:fd:32:51:d2:4b:2e:d8:
         f0:51:ac:0b:ee:bd:e6:a0:7a:f1:69:63:99:44:f0:54:00:1d:
         bd:cc:7d:77:e3:ad:2a:6a:68:8f:af:f9:43:60:7f:8d:4d:e0:
         e4:29:fe:e0:73:cf:f8:db:24:11:75:25:fd:9f:de:f9:6e:60:
         69:14:05:57:9b:01:e7:80:be:7c:fb:2f:d7:9a:7c:92:9e:7b:
         3a:32:b4:71:ee:25:97:b6:8c:f3:8f:c7:04:d6:2e:d3:50:74:
         c6:56:18:81:01:c1:32:a0:23:4e:00:48:0c:d1:07:cc:ed:d5:
         38:8b:72:35:80:b4:7f:85:8c:d4:89:4d:a5:43:84:8f:5c:36:
         60:cb:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----