Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
File:                     FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json)
Hash identifier:          0w5yOmT0DUNilPnYT/hhH+yhoARBRN8cuaNmWWf1VNY=
Subject key identifier:   F7:2D:8D:AF:FA:6B:91:9A:8D:7C:5A:85:EC:E4:F3:62:84:50:CE:B3
Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C
Certificate issuer:       /CN=167ac5231a0d7bc5824590a0b2f621ede984770c
Certificate serial:       01962FAB7A1DADD922281F29CC8E489377F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft
Manifest number:          0FAF
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=)
                          2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: ms+UBiEVtktR4ozR8y20De8p5VjIkfwoZDZGxaLt8zI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7a:1d:ad:d9:22:28:1f:29:cc:8e:48:93:77:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=f72d8daffa6b919a8d7c5a85ece4f3628450ceb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:a2:1d:ff:fc:e7:61:13:73:68:bc:92:c7:
                    a7:68:a8:20:cd:9c:f6:93:1c:27:da:30:d5:38:a5:
                    4f:72:b1:c6:ab:a3:34:bd:e3:bf:2c:86:80:1d:da:
                    32:c5:cd:d0:fe:84:1c:d7:d1:2c:3e:96:b0:9a:a2:
                    cb:38:d4:42:c5:b5:c8:5f:b5:23:74:da:14:63:20:
                    1f:03:5b:a4:c0:ad:9e:5a:cd:dc:41:60:73:87:d1:
                    2e:1c:88:e9:fd:ce:90:82:4e:e3:11:0a:9d:6c:38:
                    71:61:bc:b9:f8:8f:92:97:43:3a:eb:ce:57:cd:a5:
                    9c:f7:69:57:22:99:f2:c1:36:dd:91:29:e7:77:ad:
                    da:20:63:c5:91:c3:e3:d2:7b:2f:2c:4d:7c:3f:71:
                    9b:98:6d:57:d4:7b:33:c3:8b:44:bd:8a:62:ed:51:
                    1c:a5:cb:fd:b4:17:5c:6d:c1:5c:2b:f2:0e:42:65:
                    4a:96:4e:5e:52:88:8c:16:08:d2:86:35:97:7b:da:
                    ff:8b:a8:b3:28:e4:63:e8:a7:66:76:0e:9d:17:b9:
                    fd:64:70:b9:af:cf:53:10:73:06:7c:6b:07:41:8b:
                    45:4a:41:12:02:6f:4f:06:d7:56:48:60:f0:5b:ef:
                    3e:6d:83:78:72:7b:ea:39:cb:1d:3a:5f:73:c8:e3:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:8D:AF:FA:6B:91:9A:8D:7C:5A:85:EC:E4:F3:62:84:50:CE:B3
            X509v3 Authority Key Identifier:
                keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:01:ab:b9:45:98:8b:ae:48:a1:30:0d:78:22:ce:f3:af:5c:
         8f:60:ac:59:84:81:0e:e1:7a:30:39:99:e4:ff:01:01:42:8c:
         f5:63:27:74:36:10:c5:bc:a1:fd:9e:ba:4a:e7:28:5b:f4:ae:
         23:51:11:2a:95:29:c5:ce:e9:88:4c:17:e0:7a:15:84:b4:66:
         d7:44:e2:f3:31:33:f8:3b:51:b2:0e:90:ec:fb:0d:e5:ee:1c:
         24:d5:5a:a5:82:de:d4:7a:36:c1:ca:8e:f2:d4:7b:c1:7d:ea:
         39:82:79:8c:31:92:86:a8:c8:76:4c:64:61:19:d7:75:ab:2c:
         2a:2b:6b:44:fc:ae:82:a8:ab:e5:46:6e:e4:07:e9:d3:07:10:
         a0:67:71:a5:a1:f1:33:36:44:72:5c:3e:1c:bc:d9:52:a6:5e:
         fe:dc:bb:12:70:94:b1:fb:db:38:36:a2:33:6e:31:80:e4:b5:
         e9:6f:61:75:b6:00:79:c4:23:eb:8e:ad:54:41:bd:ea:4d:53:
         35:0b:68:58:b6:5e:25:be:d5:0c:c5:42:d3:42:fc:db:3e:56:
         13:0c:7f:a9:0d:f0:f4:15:07:2e:d5:41:48:d0:02:01:05:ad:
         9d:d1:fc:70:4c:f7:5e:dc:13:2c:fc:01:6a:cd:87:a5:72:94:
         5e:29:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----