Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File:                     _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier:          4SSU5bUNeLrLbfxgWlbprvGFUYcudibT+Zi4mJMGPcw=
Subject key identifier:   77:99:65:D5:50:BB:00:86:B1:A2:B3:17:81:49:84:6E:B8:25:DA:49
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer:       /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial:       01962DF4121EA29AF17AB17852A45F9B9478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number:          0C3C
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
                          2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: UknwaajtyP1ylvANxuIJFCBbaILdoU2H9qSAa6J747M=)
                          3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:12:1e:a2:9a:f1:7a:b1:78:52:a4:5f:9b:94:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=779965d550bb0086b1a2b3178149846eb825da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:5f:53:28:01:4a:eb:fc:1d:68:00:3f:bd:94:
                    70:1f:6a:44:1e:b9:78:5b:3d:5b:c7:dd:51:6e:e4:
                    4d:6d:e3:0f:3b:ae:0c:5d:ae:e7:9d:af:8b:1c:76:
                    b5:54:03:6e:55:fd:a6:ce:e6:a8:9f:6f:f1:02:2c:
                    57:cd:3a:6e:36:b7:17:26:d9:cd:ca:f9:f4:73:5c:
                    a0:4c:6f:39:af:d6:55:41:b6:1a:15:11:78:d9:9b:
                    f9:bd:52:7a:42:84:eb:91:7c:9d:b5:a3:b3:4c:62:
                    9a:34:ab:34:24:40:81:8e:9e:52:c9:c1:af:70:e8:
                    33:cb:52:aa:cf:50:fb:15:51:0c:5f:a7:6d:de:9a:
                    0c:4f:79:fc:fb:72:31:5e:d4:51:cc:da:6b:ff:7e:
                    0f:7f:07:c3:03:69:e6:c8:0d:97:99:30:c8:20:54:
                    de:ba:88:18:45:e8:60:1a:13:dc:7d:27:82:af:5f:
                    44:05:ca:c4:8a:06:74:53:05:56:ab:da:09:b1:d5:
                    b7:0c:ce:8d:c9:a0:39:97:67:99:b9:7c:f7:e0:8e:
                    f9:d9:db:b7:2e:8a:77:18:53:50:e2:80:ab:23:1b:
                    6d:80:2d:9c:c2:2b:0f:d0:74:1c:43:33:77:38:2f:
                    fc:48:b5:ae:f2:46:34:7f:78:ac:7c:05:88:1c:15:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:99:65:D5:50:BB:00:86:B1:A2:B3:17:81:49:84:6E:B8:25:DA:49
            X509v3 Authority Key Identifier:
                keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8b:94:79:c2:2b:10:d1:8d:f2:98:e1:7e:73:7c:6f:21:3d:
         9e:f7:d5:2c:6a:c7:ab:de:4b:49:5f:04:86:46:4e:d8:2b:0c:
         25:1b:4b:4c:5e:aa:88:e6:8c:17:96:55:72:d9:c9:6c:38:82:
         cf:cd:b6:e0:8c:93:b7:32:e8:c3:aa:de:df:94:26:44:b8:67:
         ef:39:76:cf:5d:b8:82:b5:63:f3:5e:c3:6c:82:47:e1:5b:0b:
         73:13:29:00:7d:e3:8f:d8:42:91:93:1f:20:3c:9a:b4:d8:94:
         c3:f3:84:b8:8a:9f:d4:94:49:24:a2:2e:dc:b3:4d:92:eb:63:
         2d:fe:f8:98:3d:96:73:2c:ab:da:ea:6b:57:67:01:8c:84:ec:
         87:13:59:22:f1:1b:61:4b:39:30:42:5f:28:fb:31:a1:0c:c9:
         18:6d:de:a1:68:4d:96:9e:c5:91:ad:81:96:2e:9d:56:8f:35:
         60:7c:b9:87:66:3e:ed:85:bb:ca:db:02:55:66:7f:eb:ec:5d:
         da:77:07:67:63:36:52:35:48:ff:5b:82:43:93:1b:dc:5c:18:
         95:f5:8c:d9:8c:e9:e1:ab:a9:4a:e3:4a:6f:0e:b7:e2:9a:64:
         77:f3:c8:af:1f:98:e6:ef:bc:aa:eb:26:22:7d:92:95:5d:dd:
         d4:e5:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----