Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          GdCN3qTaPkSV7DqjXlH/ZP24Lkd/Wfd8rIZ/m2vxTlk=
Subject key identifier:   12:FE:C2:8E:98:14:48:D3:32:31:AA:21:20:41:93:08:6D:38:9F:ED
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       01962F742D171BC9C2CBE89D3BD97549FB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: f3oJh9WlM4xIsVZUgpZActyawU4BuEVzvqUw3QEl0Ak=)
                          2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2d:17:1b:c9:c2:cb:e8:9d:3b:d9:75:49:fb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=12fec28e981448d33231aa21204193086d389fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:ab:b7:8f:e1:61:a2:3f:f4:01:f2:da:ca:
                    8f:98:62:a9:24:af:95:0b:b7:2d:3a:8d:25:f2:55:
                    a2:f6:ee:75:4a:13:5b:6e:ea:f5:bd:b2:89:a7:c6:
                    48:73:47:f7:66:7f:cf:7d:a7:19:7e:7f:f7:f0:91:
                    18:f8:95:3f:e0:6a:2c:37:c3:b0:cd:8f:d1:d5:de:
                    3a:73:a2:e5:23:2e:15:f6:14:42:fd:ea:4d:f3:f9:
                    00:d1:87:61:ee:2a:8a:93:87:40:9a:97:22:b8:a6:
                    17:fc:39:c3:99:54:4d:fe:89:12:28:f9:06:66:bb:
                    c6:1d:65:5e:9f:12:b1:18:cd:85:37:ff:f6:3c:69:
                    a8:71:69:23:83:fd:3d:2e:17:8a:10:e2:88:12:51:
                    35:5d:a6:f5:f3:d4:46:6d:b0:5a:92:ae:1f:e6:cf:
                    6f:af:28:ef:6a:b9:9d:41:26:e1:46:a0:2b:f3:c2:
                    72:ac:bd:b9:7f:ed:ca:82:eb:df:de:ba:c9:81:a0:
                    7e:cb:0f:44:57:e5:d3:49:3f:fc:fe:a3:b7:25:82:
                    50:29:a6:b9:a3:96:b0:b6:60:c3:da:03:ad:84:85:
                    ec:ff:54:92:f2:46:9e:e1:2a:a7:7b:38:ca:38:74:
                    c8:80:75:36:83:07:91:37:e8:cf:96:d9:77:49:98:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:C2:8E:98:14:48:D3:32:31:AA:21:20:41:93:08:6D:38:9F:ED
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:a0:9d:da:a2:f1:47:0c:0d:d9:ee:a0:c7:75:8c:a9:5b:
         6d:f3:c2:2b:83:f3:6e:92:f8:2d:90:42:9c:8d:a9:43:9c:33:
         7b:52:53:dc:97:de:5c:45:fe:2d:ef:e8:4d:ca:5d:57:49:86:
         70:b9:99:14:56:a9:0c:b6:93:cf:15:fa:20:fe:09:39:91:73:
         df:a5:60:fd:b7:6a:43:60:30:91:19:3b:e2:a9:c1:7f:5f:34:
         5a:78:72:53:60:d1:90:e5:dc:14:bb:6c:de:67:18:52:41:c9:
         ee:a8:f6:59:24:82:b8:de:e7:38:83:66:db:66:f3:f6:33:d1:
         15:f1:fb:b2:08:7b:3d:db:4d:7f:38:d8:95:8d:37:da:24:df:
         b6:09:c9:ad:b2:76:1a:e0:a4:d1:14:cc:44:30:2d:2f:67:a6:
         20:85:e1:4b:dd:88:3d:f5:ee:b6:5a:33:41:70:81:41:5e:89:
         c4:5a:25:ec:d2:75:b3:35:df:ef:03:16:60:04:d6:a7:f1:b5:
         e3:1d:44:03:e1:77:29:9c:46:14:3a:40:8e:9c:8e:29:2b:26:
         4a:4f:5e:83:be:d2:1a:35:0d:5b:e6:f3:a7:bc:f1:c3:52:d3:
         6d:01:9b:bf:63:82:73:45:74:01:55:23:2d:58:31:61:84:7c:
         40:24:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----