Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File:                     1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier:          Rk6rVfSM2FhLp3vpVxyKQSNR76YyI0FeskDQYhkJswk=
Subject key identifier:   C2:86:37:16:9B:B6:C4:48:B2:40:E3:57:59:9B:B1:7B:80:36:9A:61
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer:       /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial:       01962ECF63885C9C2CEC30D895FB96862A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number:          0F36
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: TRf9ilVildoexhEruUOO0PN3icYAVrFNH6MHsd8/YwM=)
                          2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:88:5c:9c:2c:ec:30:d8:95:fb:96:86:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=c28637169bb6c448b240e357599bb17b80369a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:95:a9:35:04:2e:f3:59:84:c1:b1:20:96:
                    65:6b:00:0f:a8:ec:8a:f0:80:26:07:48:94:fd:ec:
                    68:12:33:1f:81:75:ea:09:d3:66:34:4d:a6:50:79:
                    d4:62:12:66:34:e4:66:b6:aa:a8:62:ed:da:4b:b9:
                    f8:61:87:92:75:bc:32:ae:44:0c:28:f2:77:83:cf:
                    b4:97:27:0c:a5:42:93:fb:ac:cb:65:3b:10:a7:aa:
                    16:dc:ed:5a:26:49:b6:ae:54:c1:55:3b:f7:aa:40:
                    11:d7:e7:41:7e:82:ad:ee:47:ee:db:cd:da:8c:a9:
                    ee:3f:0a:4c:c1:0a:ad:6e:fe:7e:90:d9:67:37:15:
                    21:3e:81:cd:90:ef:a4:cd:27:75:f0:df:47:28:57:
                    16:4d:8b:53:1e:f7:b7:aa:ad:56:db:53:30:60:63:
                    9a:91:4c:6a:33:76:a9:be:c7:75:5a:ac:66:43:f3:
                    1f:bc:c9:5c:da:00:0d:c3:dc:55:50:48:5e:de:95:
                    7c:86:e5:c9:d7:d4:05:5e:e7:4b:5d:bd:67:c3:ae:
                    c9:4a:18:02:f5:50:f1:85:ae:59:68:e8:28:13:a5:
                    23:27:bb:15:fe:8f:9c:c4:5f:0f:33:db:2a:1e:f4:
                    f1:36:2f:db:81:14:42:2e:c4:cf:93:9d:87:35:2f:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:37:16:9B:B6:C4:48:B2:40:E3:57:59:9B:B1:7B:80:36:9A:61
            X509v3 Authority Key Identifier:
                keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:57:28:de:88:cb:05:d3:ac:97:8e:77:e8:a6:b9:f2:93:db:
         9a:31:9c:7f:51:67:fd:ae:e9:67:21:76:c1:ce:df:96:28:a9:
         76:2f:da:79:63:f7:c0:c1:0d:2d:f9:2d:77:86:66:18:ce:dc:
         88:84:98:94:34:0f:01:25:71:55:20:8b:ad:22:a1:bd:a3:24:
         37:51:25:c3:bc:cf:8b:07:35:61:c5:d6:34:13:45:da:cc:60:
         5d:94:0f:5a:f8:dc:fc:c0:b6:72:1f:3a:86:bd:b7:ba:82:83:
         91:e3:3e:98:71:73:f0:07:2a:ac:2b:cf:b1:ed:57:2f:99:b1:
         a8:14:5d:a4:81:9f:e0:7d:58:45:1a:0e:12:ba:e6:65:8f:06:
         3e:39:1c:b0:a2:3a:48:de:d4:c7:23:5e:08:85:64:f8:cf:b9:
         bd:ab:41:25:b4:7e:0a:e2:ef:44:e1:3c:e7:e0:52:a3:95:66:
         f2:f2:19:51:86:08:27:a4:63:37:2b:a9:43:08:0b:37:79:1b:
         0d:fc:61:a0:01:b1:14:b9:85:00:b8:cf:59:a7:6b:3f:8f:0b:
         de:fa:91:59:50:52:5e:01:8e:42:d6:e1:df:1c:f4:f8:0f:b8:
         ef:fd:50:d3:18:f3:78:5c:63:8b:4b:2b:fd:68:5a:10:9f:16:
         1c:95:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----