Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          04Ds+BNjD3IQNESFbiB4tSoHpCn77Fk5F+ICUvCfILo=
Subject key identifier:   55:2F:A8:A2:93:A1:82:18:1F:E8:56:71:D1:B9:B0:AC:5B:0D:BC:98
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01962FAB6475801623BDF5163219F2ED578D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          0271
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: wpZoYr4vqvfIwIZt6OjAOWFlVKUTNXI3GmX84A3I0Yw=)
                          2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:75:80:16:23:bd:f5:16:32:19:f2:ed:57:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=552fa8a293a182181fe85671d1b9b0ac5b0dbc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:af:c8:68:8d:c8:37:0b:53:7f:60:4a:d3:
                    1e:06:2b:0c:e8:07:2c:f3:71:c3:d8:ea:9b:b8:df:
                    d5:de:d3:0a:3b:0d:42:b5:f1:51:6c:f5:55:e0:d8:
                    41:09:3b:a6:87:7a:5b:5c:bd:d7:82:85:00:79:fd:
                    6e:c8:fa:14:dd:8a:94:5c:63:d9:74:1d:20:b4:06:
                    e1:fc:33:9e:74:f9:47:be:10:9b:93:a5:90:0f:5c:
                    a5:98:51:61:71:82:f8:fd:6e:68:f3:9b:12:e7:0d:
                    81:14:f7:8d:e4:fd:cd:7f:23:6e:1b:6f:65:c0:98:
                    2b:e3:94:b1:e7:6b:20:92:1c:9b:f0:95:d6:bb:75:
                    18:f8:7c:1f:92:5d:55:a9:e9:c5:8b:46:ab:cb:bc:
                    ea:ba:d1:1b:7c:9b:a5:aa:e3:42:6d:7e:04:a7:df:
                    54:8b:f9:23:79:7f:83:c2:6c:48:35:2c:28:0a:89:
                    fc:51:27:0a:87:90:e1:5b:3b:89:de:7f:ea:8d:c3:
                    a0:d7:f9:3d:aa:b7:a8:bf:7a:41:c7:c7:90:f8:f1:
                    24:c2:f7:17:cd:f1:00:4e:7f:ee:d1:1d:06:eb:9a:
                    41:fc:0f:69:38:67:94:a0:65:16:2e:8c:ab:da:07:
                    d9:19:9d:d2:d1:f7:1f:16:ab:cd:9d:ab:90:65:59:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2F:A8:A2:93:A1:82:18:1F:E8:56:71:D1:B9:B0:AC:5B:0D:BC:98
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:fc:db:41:d1:6d:3b:90:1c:d4:1a:03:ed:28:be:be:c9:
         07:c3:c7:d8:26:00:c1:7b:a2:20:e4:72:bb:49:e4:21:22:9d:
         04:64:08:6d:9a:84:9d:33:9d:d0:65:27:6b:80:98:6b:2b:bd:
         a4:9f:85:3a:5b:3e:65:2d:3c:c9:22:e9:51:c3:11:12:db:5a:
         e1:31:2f:58:c2:35:05:51:95:2e:56:23:0d:bf:c7:7f:57:5f:
         b9:d2:d8:8a:13:0f:9a:5e:de:cd:48:fd:62:70:37:37:9e:4a:
         c3:76:f1:33:8a:04:99:ad:fe:77:3e:8f:4d:79:e1:cf:53:cb:
         51:40:4f:8a:cb:c6:f1:04:0e:30:32:5f:70:ad:9a:31:a4:84:
         a6:b6:a8:92:56:62:ee:be:1d:ce:4b:f7:df:b7:81:82:9b:7c:
         ee:0e:b9:07:9c:4c:b7:9b:8d:77:c9:32:25:0a:42:09:91:76:
         68:a0:a7:6b:56:c9:4a:73:42:9a:54:65:0b:88:b8:c1:93:8c:
         48:1c:69:4f:4f:02:e3:6a:65:8a:e4:a6:a9:3b:7a:65:79:0e:
         46:75:cc:31:9c:d2:59:86:f2:c0:0f:5d:41:c4:bd:d2:72:d4:
         ce:1e:85:0b:d3:c4:28:62:e4:99:41:e0:e2:b1:9f:11:09:e1:
         65:9a:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----