Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          awOY5rLNcOpUvxXBY2EIBkVwQVoVbUjS/HoGsIsne0w=
Subject key identifier:   E5:C9:17:53:82:F8:F8:9B:0E:6B:F9:B3:B4:16:AF:3D:D3:33:69:84
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       01962E9896679630CA4A18E81C7C8369AE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          0FCF
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 5XMYoEM__63W79FSrJxqp5j0UJE.roa (hash: 6AxR53Ak3LvDCXifdXwDPZPN/iyJdk5U29qoVvF/ZYU=)
                          2: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: tjcIUTXwpQdY/XPx6Oz/3oDigTaDokSnDTZyaXDHyqA=)
                          3: b-Ey_OS_HXWojxgowNhsjzhqy0g.roa (hash: IYNzeBFLK7crpI5DxHVXy2f+PctN4mHIKes13g+bMzc=)
                          4: qnzJlov9IfHa6-JIDhU1P8n2pxc.roa (hash: hqsVesAuwoplFvP+6XnZFOJ9zgaV+J5/eniIwX7ChVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:67:96:30:ca:4a:18:e8:1c:7c:83:69:ae:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=e5c9175382f8f89b0e6bf9b3b416af3dd3336984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:b3:e5:d8:d6:ad:a5:ca:2f:ec:bf:c8:4b:
                    76:67:27:41:71:4c:4a:a7:5c:89:05:5c:63:0f:f0:
                    bf:d6:49:ca:36:09:c6:fa:61:7e:ab:3d:fc:53:56:
                    72:18:63:2a:17:2b:fd:14:4f:28:6f:fa:a8:b1:5c:
                    eb:4e:65:a8:aa:c1:ae:70:46:2b:e2:d0:d9:5c:e2:
                    33:3f:d1:1a:01:37:90:84:2d:64:e2:e8:5c:3b:4e:
                    2c:62:75:f3:cc:8f:ca:a0:67:81:2b:53:ee:7c:a9:
                    2b:25:b4:31:d8:c4:56:cd:61:23:ea:b7:ba:57:cd:
                    32:1e:ba:67:1d:af:3c:c6:ce:19:25:00:a8:98:31:
                    1a:8a:9d:92:5e:66:60:37:64:0e:6d:92:ef:59:dc:
                    d1:1d:39:53:e6:b2:d9:b2:85:b4:5e:86:51:70:ee:
                    74:63:69:42:62:26:fd:7a:1d:43:78:c7:7c:03:8d:
                    6e:91:fa:a7:a6:ac:09:7d:b7:bc:81:74:9c:e2:49:
                    76:65:34:37:19:bc:b7:57:94:f6:80:28:e7:49:28:
                    68:37:03:c4:e2:78:33:85:3c:52:ba:a2:e8:d8:b6:
                    ad:d7:d5:ee:e0:a3:c7:09:55:6a:78:04:0f:35:8a:
                    5e:81:c8:65:d7:2d:c3:94:5c:54:24:2d:3b:5f:8b:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:17:53:82:F8:F8:9B:0E:6B:F9:B3:B4:16:AF:3D:D3:33:69:84
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:61:3a:61:7f:a2:84:90:a8:5d:41:6c:32:a1:13:ba:fd:
         a6:aa:b7:10:28:dc:74:59:11:f4:3c:32:b2:47:58:01:7c:64:
         fb:56:d0:bf:36:42:fc:99:73:d2:bf:d6:c8:83:93:91:bf:5c:
         2b:bd:13:f2:39:6e:a7:c7:14:65:72:b2:36:1e:b0:7f:7b:8c:
         fc:74:df:6b:35:51:21:95:99:fa:0f:8b:2f:3b:5e:09:c0:2e:
         32:2d:73:91:32:81:4c:55:2b:c8:1c:71:00:51:e0:c0:5f:ca:
         75:f8:34:4a:c5:5e:52:31:82:09:87:d5:8b:43:d0:82:af:74:
         ee:f9:81:2d:f8:6e:11:85:34:5a:cc:a4:7b:21:ff:6d:a4:24:
         1a:a7:8d:bc:c8:ae:e4:4f:6e:cf:3b:14:31:3a:cb:9b:fb:08:
         eb:23:e3:c1:0d:9f:75:4e:f7:47:3b:20:05:90:0b:49:95:0a:
         28:ab:14:ea:20:a4:a0:55:c4:53:6c:81:cf:d4:3d:8a:36:08:
         88:73:93:f7:dd:90:5a:fd:f8:d5:54:72:b2:bf:53:c0:42:4f:
         b7:39:71:52:fd:8e:7d:1e:26:a5:ed:21:46:f3:54:2c:3d:b2:
         c8:d0:a7:57:65:26:fc:42:9d:82:60:17:03:94:53:9f:c1:e8:
         81:02:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----