Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File:                     F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier:          7pmhyTA88v6hrXoPb8zMuERLtcQ4+TVwYhlIN07mqZ0=
Subject key identifier:   3C:6E:49:41:6F:5C:82:9C:EF:A1:60:F1:88:8E:64:43:3D:FA:55:F8
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer:       /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial:       01962FAB5DBBEB226E1E3EF902ED4571C88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number:          0751
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: kB0nrw9vrTmaVvBRsClVz8XT+5INEG7uEgVnYnnjtLk=)
                          2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:bb:eb:22:6e:1e:3e:f9:02:ed:45:71:c8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=3c6e49416f5c829cefa160f1888e64433dfa55f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:40:67:93:db:f1:1a:a4:06:e6:9f:6e:4c:
                    cc:bf:13:5e:9f:a1:d8:1e:6f:7b:8c:ba:c4:71:cd:
                    fd:0e:c4:3d:64:11:68:b6:1f:08:f7:d0:09:11:50:
                    ba:3d:f4:84:65:c8:05:49:38:72:13:9e:5f:9b:b4:
                    78:46:36:c2:7b:5f:0c:04:81:30:cf:96:e8:32:66:
                    9f:f7:08:81:ae:92:9a:c9:26:4b:ce:08:76:11:55:
                    7f:d1:fe:50:bb:eb:d7:cc:42:53:3e:89:a6:3e:0b:
                    94:d2:90:22:d1:19:b0:d3:12:e9:6c:0b:75:a6:45:
                    97:4e:b3:84:72:b0:e2:1d:aa:f2:ed:74:35:b1:2d:
                    79:2d:65:d6:d2:fb:b2:e8:93:a6:b6:5e:de:8c:f4:
                    40:5f:fb:60:42:56:cc:da:87:5d:eb:21:42:cc:92:
                    15:bd:81:bb:07:a1:72:e0:a2:96:37:3a:05:98:a5:
                    7d:92:d7:0b:d1:11:ca:79:2e:4e:2b:80:ff:e9:cf:
                    a7:81:a7:80:85:0c:08:65:7d:92:55:f0:86:96:0d:
                    3b:14:c8:dc:5a:58:01:c4:e8:6c:88:61:7a:1b:7f:
                    9c:9c:ee:78:94:eb:97:43:5e:9d:8d:34:d7:a6:40:
                    c5:a8:0c:96:20:62:0d:74:53:6e:08:a6:9a:12:85:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:49:41:6F:5C:82:9C:EF:A1:60:F1:88:8E:64:43:3D:FA:55:F8
            X509v3 Authority Key Identifier:
                keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:95:77:88:f0:68:3f:43:d1:01:bb:3d:78:da:0f:8f:f4:
         02:d9:b3:7c:a2:93:a2:b3:46:07:99:2b:2c:0f:57:96:41:aa:
         61:33:72:45:5d:49:04:55:5e:5a:2b:33:ef:bf:f5:63:d2:2b:
         37:4d:72:9a:7e:2a:42:fa:0b:97:aa:6b:05:be:95:3d:c5:90:
         70:35:3b:da:b0:18:3f:fb:ab:5a:02:2e:58:35:15:9c:7a:cf:
         3c:2d:91:91:2f:db:ec:01:b5:d4:6c:1e:7f:8b:de:c2:3d:64:
         2f:08:0f:28:3e:e0:91:f5:64:67:a7:6c:69:c9:ba:14:2f:03:
         e0:62:51:4f:0d:37:27:39:6a:bc:d0:a7:9d:16:d8:54:dd:60:
         ad:0a:ea:20:4d:d1:31:73:ec:f0:45:46:35:f3:d5:08:c2:c0:
         62:c7:f2:9a:db:f0:ac:c6:0a:9d:c0:7d:cc:6e:91:96:bd:18:
         38:f5:d3:2f:0f:15:e0:a5:2a:c1:45:f9:c0:61:0a:6f:8b:31:
         34:10:75:fb:01:14:f9:14:8c:98:c3:58:1d:6c:7e:15:53:8c:
         7c:e3:18:a6:fe:8f:7f:5d:fe:b3:3a:a9:ae:01:67:ca:d1:af:
         96:05:9f:6e:c4:1e:77:c8:1c:cb:6b:c4:e9:30:9a:9d:9a:f6:
         cc:6d:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----