Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File:                     fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier:          ynrbwqwZxlWYUAtVaiEiWwQoPjjxR4GC/1VbYQ/r29E=
Subject key identifier:   4D:E5:4F:DC:F6:EC:5E:8D:05:20:37:60:17:2F:98:8C:17:8E:80:77
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       01962F74833295135A486C2F1B93B47317D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number:          0433
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: Bd7uhdQ6yluyRU2d7K5YEj0Ipdx0N+MYIe1D7hEwDL0=)
                          2: ur3dSSpuEwtDhi5m-xYjQ9J-ZlQ.roa (hash: cwXAi1sfFPfN04wsw1nczJfstzqjCt7igbtZqfyu1Oc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:32:95:13:5a:48:6c:2f:1b:93:b4:73:17:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=4de54fdcf6ec5e8d05203760172f988c178e8077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:d3:e7:2e:cc:49:21:16:95:ac:bd:09:62:
                    54:19:9f:7a:5e:91:9f:91:ef:7c:4e:48:ea:40:8e:
                    b7:87:71:f3:79:65:8f:3e:6c:57:99:f4:9b:9e:2b:
                    e5:3d:23:e8:36:6b:21:39:13:b3:d0:e0:84:d4:18:
                    ec:00:8e:d2:57:4c:dc:8f:eb:b7:77:c3:ef:18:68:
                    5d:ff:f9:e5:90:f3:9d:b2:36:e2:6b:7e:41:00:1f:
                    ac:8f:d4:65:b2:03:7f:e8:4d:69:0d:d9:b0:26:f2:
                    ec:5a:af:ed:83:3d:fd:65:df:48:73:4d:fb:d5:28:
                    fc:ac:20:49:6e:45:f2:23:ff:02:48:1c:52:4b:c7:
                    27:12:5a:3e:c8:c5:34:90:d2:c0:68:1f:91:4e:ab:
                    b5:b3:78:04:a9:eb:d2:49:c2:af:d0:24:a4:7c:c5:
                    cc:b1:b5:d6:24:f6:0d:e7:67:66:54:48:0d:82:ef:
                    2a:ea:80:a7:0b:d2:69:4f:2b:fe:f2:f2:96:1c:82:
                    54:ab:03:21:53:24:85:19:bd:42:d1:13:1c:b8:58:
                    a4:d3:b6:24:40:85:bb:b4:a9:85:a1:6f:5c:cc:61:
                    71:cb:d4:5e:9b:1e:88:22:20:50:a2:80:67:5a:f1:
                    0c:7c:be:6a:5c:ea:68:f3:4c:f2:c1:41:84:29:fd:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E5:4F:DC:F6:EC:5E:8D:05:20:37:60:17:2F:98:8C:17:8E:80:77
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:c6:e3:f7:59:da:ab:9b:c6:5e:2f:df:76:4c:8c:a0:ec:
         83:7a:fa:1c:18:da:60:f9:11:5c:3f:9c:6d:3d:de:b1:34:49:
         d5:3e:c0:c7:bf:36:4b:14:dc:7a:ca:cd:b6:e1:82:ca:34:ac:
         31:02:2d:89:40:21:ec:ec:75:a9:d2:32:26:bd:c5:fb:5e:5d:
         3c:a5:04:9d:4e:43:38:43:e8:c5:ee:81:71:c3:78:80:34:3f:
         d9:74:36:9d:90:d7:22:14:15:5a:cb:98:c6:d0:83:db:a5:8e:
         7f:39:47:e5:da:db:2d:9d:c9:b4:07:94:2a:72:b4:bf:38:dc:
         a9:8d:54:19:4c:b8:9d:ae:35:57:c9:88:cd:e7:7c:66:54:e7:
         18:5b:1c:99:7c:c9:79:7d:6a:95:fa:29:e7:fc:71:56:eb:81:
         66:b2:e9:15:1f:f8:24:5e:c1:c8:28:c1:14:9c:59:bc:09:c4:
         ba:fc:22:c0:b3:f9:05:be:ac:79:95:42:0c:37:48:ec:31:c2:
         ea:c1:0f:80:f5:14:5f:74:1f:8b:46:c8:41:87:99:d6:83:af:
         08:85:ea:03:8c:a6:c3:23:a1:2f:85:10:8f:04:3c:5c:93:17:
         02:98:4c:30:24:34:3e:9c:05:b7:b5:37:02:7f:78:83:6d:a0:
         4b:e5:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----