Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
File:                     mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json)
Hash identifier:          ua/xjFjCNIcc8DQY3tizVBKSHdJv0RsXs0X93z0eSAM=
Subject key identifier:   FA:A5:E2:05:38:CB:2B:9A:33:58:22:C8:A4:D9:8A:BA:49:95:8A:C4
Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85
Certificate issuer:       /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
Certificate serial:       01962F06CB8059D5B9CBF3F6089719F62E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft
Manifest number:          03D7
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=)
                          2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=)
                          3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: hxVDaPOV+YhOIWo72m4Xxm3NXBCV6Y0QqFNA8sZZSAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cb:80:59:d5:b9:cb:f3:f6:08:97:19:f6:2e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=faa5e20538cb2b9a335822c8a4d98aba49958ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:4a:4f:63:af:dc:c8:a8:3a:04:83:b8:5b:
                    89:b3:74:28:eb:c4:7b:d0:61:8c:97:f1:f3:f4:e3:
                    49:92:2a:74:3a:75:6b:3c:ab:51:fa:89:81:81:df:
                    42:49:ac:e2:6b:f2:4a:9a:d5:9e:e5:8c:00:14:db:
                    51:ef:38:5b:e6:8a:3d:cb:c4:f7:3b:49:c5:44:0f:
                    2b:5d:b6:be:5d:ac:7c:de:74:97:9d:20:5a:86:58:
                    23:77:4a:6f:60:dd:2b:db:34:91:2c:2c:fa:26:f3:
                    7c:b8:96:31:cc:52:62:01:d6:4a:88:01:5d:cc:6b:
                    c5:94:90:85:3f:e4:7b:a2:39:02:f0:75:e3:00:46:
                    30:1a:5c:fe:21:96:07:b3:44:78:4f:5a:56:66:cf:
                    ba:4d:2a:56:a3:c3:46:f7:2f:03:c6:2a:51:0b:95:
                    df:47:25:99:b7:70:c1:6a:fe:6c:a5:ff:b2:ae:cc:
                    08:2d:50:74:70:d8:5e:87:43:2b:23:20:7c:c6:59:
                    8f:54:cb:dd:16:11:f6:3b:6d:c2:c5:65:c2:9a:c5:
                    6c:8c:c5:37:59:39:c0:4f:d1:05:b8:74:f3:92:4a:
                    f2:e3:02:f9:3f:fb:15:15:4c:ba:ab:7c:8b:90:68:
                    21:a2:48:1e:1a:cf:22:6a:d0:c6:77:43:3c:7a:05:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A5:E2:05:38:CB:2B:9A:33:58:22:C8:A4:D9:8A:BA:49:95:8A:C4
            X509v3 Authority Key Identifier:
                keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:ad:39:a1:24:7c:a6:d3:8d:f7:12:95:f0:ff:86:ce:03:
         f7:2b:4a:d6:83:01:31:a1:ee:d6:c0:f7:d1:81:33:8a:d0:63:
         c0:b7:e8:f0:04:95:dc:77:06:2f:08:46:49:fb:14:83:09:53:
         21:c9:fa:83:1b:fa:17:8b:4f:89:23:bf:ea:09:a5:a1:e0:6f:
         58:97:38:8c:0c:bb:2e:a6:d0:a2:78:0d:cb:a3:67:72:7b:4e:
         23:2b:af:e7:56:35:43:2f:97:61:09:0e:fe:03:8d:e5:80:d6:
         c8:90:3b:c8:b4:77:9e:fc:2f:20:8b:a0:d0:cf:d7:82:5e:0e:
         69:38:4e:50:b4:57:c6:ae:52:9b:41:25:27:bd:0f:57:d7:3c:
         1d:b1:73:87:32:a9:6b:6d:55:e9:b9:ac:f8:08:54:ca:0d:e2:
         29:06:59:2a:72:5d:76:f2:24:bb:24:b4:b9:9c:c9:73:68:b0:
         05:2a:97:68:29:b7:e3:68:cf:8a:28:d0:9c:35:07:aa:f8:a4:
         69:0f:5c:b6:e6:a9:12:36:61:35:8b:75:29:b8:48:1b:5c:d9:
         f0:b1:35:25:8e:fc:c9:67:13:09:b5:02:bc:ee:d7:09:69:7f:
         1f:6b:9c:6c:60:70:4d:1f:e3:44:f7:e2:89:82:13:0a:58:bf:
         3d:45:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----