Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File:                     fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier:          Bv8bwb81vgy8IKoQPiLEd+UVreIq5LkmuA1/6RIQcPI=
Subject key identifier:   F6:93:F7:52:A8:0D:6D:D2:8F:CA:14:6B:B1:5D:69:B5:3A:A4:A3:9F
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       01962E2B454B87734F04AE5831C9C0424973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number:          0203
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: LKwLUOL34QmGB8aaMLI0hhEYEjusMNDAUbd64a7sVkc=)
                          2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:45:4b:87:73:4f:04:ae:58:31:c9:c0:42:49:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=f693f752a80d6dd28fca146bb15d69b53aa4a39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:33:bc:c1:07:4d:2a:05:18:cd:db:9c:94:
                    de:55:6d:94:ad:22:ff:86:f2:04:16:ad:75:0d:54:
                    51:c4:3b:6f:b5:c3:03:6e:ee:95:88:b6:50:54:25:
                    46:a4:5f:7e:c1:6e:4b:8e:fe:40:a5:dd:20:53:dd:
                    1f:a6:8a:60:09:13:68:e0:01:bf:db:5a:b2:1c:95:
                    f3:bc:9e:a5:61:06:ea:70:af:06:e9:3e:f2:4b:88:
                    51:73:e6:b2:b7:99:4a:c9:8d:4f:9b:83:8c:b1:f0:
                    37:63:b5:a0:cb:1a:65:f8:ec:03:eb:31:69:b2:58:
                    bd:0d:6d:36:3b:4a:57:c2:73:7f:4e:d0:66:4d:88:
                    fc:81:3b:37:43:0c:32:88:55:a7:91:dc:c9:b5:7b:
                    72:4b:fa:e4:af:8a:b1:2b:ac:aa:ea:ea:09:2e:eb:
                    58:98:9c:57:6d:c2:f8:f7:bd:b0:6f:7a:f8:c7:1f:
                    8d:c3:a0:9d:32:5c:95:8a:fa:73:ef:b2:a0:2f:1a:
                    e6:78:e6:68:2f:1b:9a:35:c6:86:ec:95:d5:a4:8f:
                    57:c1:71:94:28:1b:76:95:d3:d8:a6:3d:cd:a5:b2:
                    12:da:76:a9:14:0b:da:42:c6:7c:d6:a1:32:f7:36:
                    04:d2:60:76:0d:0a:e2:8b:06:fb:a8:f1:0f:e5:52:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:F7:52:A8:0D:6D:D2:8F:CA:14:6B:B1:5D:69:B5:3A:A4:A3:9F
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:68:a1:e4:9f:ac:05:cd:24:55:5c:dc:47:cb:2f:44:ba:ee:
         c8:44:4a:92:84:b4:50:84:0d:79:fc:2a:81:be:54:46:77:bd:
         d7:15:1d:0b:0d:fe:e8:48:04:d0:50:0e:83:fa:e0:78:ac:03:
         be:6a:97:cc:ba:b8:ad:e5:4c:9b:db:94:ff:0d:28:c0:71:ef:
         ab:67:dd:06:7b:af:17:80:11:e3:a7:9e:65:6e:6d:10:40:72:
         c3:51:06:70:46:be:67:80:42:a1:ea:b3:8c:e4:28:0e:62:c5:
         e5:c4:53:99:46:c7:04:be:95:43:cb:8f:81:6a:e1:54:63:bf:
         e0:ea:a8:47:16:a5:d9:69:a1:1b:3a:d3:bc:c0:14:96:0e:8b:
         c7:f5:fd:b4:e3:88:1c:d9:d6:95:67:e5:2d:3f:82:03:db:a7:
         12:d2:da:47:b1:70:35:47:14:d2:56:93:8c:cc:b7:48:d5:32:
         52:e3:69:11:8b:81:4a:77:ba:65:1c:56:ff:d0:37:f0:7a:15:
         c2:4b:4c:36:d4:3c:6b:36:94:b0:8f:dc:4f:68:2f:ac:2f:14:
         c4:34:70:41:db:90:e6:37:0f:c3:d8:d2:c6:1f:ed:19:f9:de:
         48:e3:c7:28:8f:34:53:01:cd:a7:31:0f:6e:73:7a:da:4b:98:
         f5:ac:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----