Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File:                     FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier:          SMOa6Fzcn0dxtFhhjH4UA4iZ2gDysqLB82nYVy8rb8k=
Subject key identifier:   8B:A1:F6:D6:71:E3:CD:F7:ED:DB:DB:7B:DB:90:84:EB:8D:A4:94:3A
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer:       /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial:       01962E61B5AF352E8A3E3CB1B908F79A2FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: qhzWXIrFqwsF6y9MHGqtnOJ/8D+gwA+aHg07Ees26WY=)
                          2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:af:35:2e:8a:3e:3c:b1:b9:08:f7:9a:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=8ba1f6d671e3cdf7eddbdb7bdb9084eb8da4943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:22:1d:22:6e:a5:7a:94:f8:05:b8:48:05:
                    2f:00:28:cc:e6:12:06:4d:e5:61:46:eb:00:fb:25:
                    4b:16:55:e8:e4:b2:68:c5:89:65:a6:07:40:17:51:
                    45:37:4a:3f:a2:41:f7:8c:30:70:96:5a:57:bb:a1:
                    42:18:7b:6c:70:e0:4a:16:15:59:e3:20:e4:63:20:
                    0a:69:78:3f:ad:34:14:78:45:76:19:5f:0e:27:65:
                    82:8a:db:50:5b:0e:b9:61:f1:27:90:f4:f4:7d:2d:
                    51:11:c7:07:5c:bf:4d:e4:f7:cf:3b:bd:14:07:b3:
                    2b:46:c1:13:bf:0e:dd:ad:d2:c5:5d:4e:88:54:e0:
                    ba:3a:c7:44:d0:6b:ef:4e:4d:27:bb:54:f2:df:22:
                    b4:38:7a:5e:4e:6c:23:da:bd:e9:44:35:2f:66:ff:
                    7c:9f:fe:04:d6:59:69:bb:a1:b3:db:4a:82:de:69:
                    dd:f0:81:6e:14:3c:f5:a0:da:c2:49:75:0b:6d:b9:
                    70:20:ae:4f:04:8c:6e:8e:ce:20:35:1e:9e:3b:98:
                    c5:3b:93:31:5d:94:a0:90:59:e3:b8:64:d4:28:e5:
                    94:44:df:3c:5d:52:bf:2f:97:3e:9c:d6:34:1e:89:
                    9a:f8:94:5e:5e:22:4b:a4:4b:e9:8b:b6:2f:29:5d:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:F6:D6:71:E3:CD:F7:ED:DB:DB:7B:DB:90:84:EB:8D:A4:94:3A
            X509v3 Authority Key Identifier:
                keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:74:0b:52:3d:ab:27:e8:36:7d:a1:17:7a:43:14:bb:13:55:
         b9:4f:64:4a:cf:c5:14:c4:8e:c8:f0:5b:8a:30:a9:eb:88:4c:
         da:9c:27:d9:a1:af:05:39:2a:41:cd:df:09:d7:5f:19:26:97:
         a6:50:03:f2:15:5d:29:c6:4d:54:49:cb:f5:3e:a4:5d:4a:c7:
         2e:a4:f3:71:06:8f:d4:bb:5d:30:8e:3a:57:9f:0a:d9:fe:3c:
         d4:12:d9:46:e2:5f:10:a4:fe:6f:84:f3:10:0c:16:64:ea:d8:
         03:d3:81:a1:57:c3:7a:df:8e:83:97:b3:cd:c0:ef:08:77:62:
         d6:a0:c9:5b:21:87:7a:a8:e3:b1:03:17:e3:1d:a0:8e:a7:98:
         34:a8:c1:ea:80:43:ab:05:57:31:e2:b8:af:09:5d:6b:8d:08:
         81:c6:9f:a9:cc:9e:bd:b8:1c:a7:19:23:6e:05:d3:1d:a9:3b:
         d6:a6:f7:f8:ae:90:c2:e1:f3:08:fd:ed:71:15:df:3f:30:bf:
         7b:73:f0:9b:a9:85:c3:91:ae:9f:22:46:05:a0:da:5e:54:98:
         7f:a1:8d:8d:2f:da:93:d1:d0:4a:df:81:c4:5e:51:83:56:e9:
         ff:94:60:0b:64:0f:c0:26:f9:ef:7b:21:e7:d4:8b:78:42:58:
         a7:5f:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----