Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File:                     1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier:          P04oJ+SSxYpUR/Gk0ID8Bnaavom2gYpBjnoaDiMzSzg=
Subject key identifier:   AF:BD:19:FF:4C:DF:91:2E:0F:D2:74:60:F9:58:8B:7C:66:C6:96:08
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer:       /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial:       01962DF45D82F62FEC29520121039E46048D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number:          1011
Signing time:             Sun 13 Apr 2025 07:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:51 +0000
Files and hashes:         1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: 0bBTg2PotFK6r/RCRTcZMhJUBp495Mnd/NOoe7/KYD4=)
                          2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5d:82:f6:2f:ec:29:52:01:21:03:9e:46:04:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
        Validity
            Not Before: Apr 13 07:01:51 2025 GMT
            Not After : Apr 14 07:01:51 2025 GMT
        Subject: CN=afbd19ff4cdf912e0fd27460f9588b7c66c69608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:45:8f:22:0f:3d:96:8d:1a:c3:52:bd:01:
                    58:17:39:2b:49:b3:81:8a:a5:99:5f:cd:ba:8a:13:
                    60:0a:89:15:d0:42:b6:ee:35:b3:01:3a:5b:34:0c:
                    3b:61:ac:14:05:c6:69:14:fe:b5:50:dd:4b:54:31:
                    21:fd:06:35:7b:0b:42:90:3c:7c:d7:a7:5b:d4:88:
                    12:dc:42:1a:9e:ac:e3:a2:57:c9:c4:61:12:ce:5c:
                    41:c3:7a:15:f0:ae:f1:6a:ec:ae:ec:fe:66:c7:24:
                    66:de:80:bf:09:2a:76:f0:a9:60:f1:ac:c8:68:3c:
                    8d:a3:11:b7:58:f6:2d:29:3c:a9:7c:63:76:2f:97:
                    b2:a5:27:74:1b:dc:d7:85:56:02:cd:b3:88:0d:13:
                    83:2d:da:2e:97:6a:3f:14:0f:88:19:cf:a0:89:f4:
                    35:68:4c:0b:46:dd:ec:7f:32:a3:c4:8a:7f:40:49:
                    81:7d:d9:37:f2:12:78:04:df:7d:a4:fd:af:70:ea:
                    31:82:84:71:ab:d9:c9:9d:5e:4f:c8:ac:f4:df:a2:
                    4d:a8:c3:5d:cc:7b:dc:96:0b:d8:08:62:e6:e4:31:
                    f6:fc:85:cb:f8:30:92:7c:9f:93:07:2f:4c:b5:aa:
                    22:39:c7:9b:e8:c2:7d:34:0c:2a:11:33:75:8c:b3:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:19:FF:4C:DF:91:2E:0F:D2:74:60:F9:58:8B:7C:66:C6:96:08
            X509v3 Authority Key Identifier:
                keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5b:cc:3c:45:73:a7:c7:2d:a5:c9:74:7e:43:f9:0a:52:0e:
         85:b5:52:40:36:f1:1c:5e:01:51:16:d3:7b:45:f4:05:38:97:
         9a:4e:76:f3:a9:8d:fb:48:38:12:22:a3:d3:42:08:71:c9:ac:
         3d:69:73:30:ab:c2:4e:33:0e:f2:e9:11:a6:d7:ca:dc:b1:44:
         06:09:3f:1a:9c:a8:98:a3:72:3f:5f:da:31:94:3a:46:c7:c0:
         06:e4:22:9f:75:7a:a6:be:57:24:fb:13:f5:15:9e:9e:72:5d:
         2a:03:9f:7e:2d:56:13:e2:0c:b1:a8:c0:00:f1:e6:bc:b1:88:
         a4:a0:eb:24:07:8b:75:ff:09:d4:c7:db:82:1a:fe:51:43:eb:
         cf:b0:c6:52:c5:64:ae:fa:2e:15:d9:30:de:bd:73:6d:ef:9f:
         59:17:7c:c6:47:8f:75:8b:bf:e9:07:e9:c6:f4:1a:07:b6:f0:
         b7:b5:60:7e:c7:6b:f2:7f:f2:03:0f:31:23:b2:a1:de:ee:f1:
         aa:5d:b3:f5:41:74:96:1f:a2:79:59:2a:d6:1c:bb:2d:02:bc:
         ce:8b:9a:be:1a:be:5c:21:8b:ed:27:4e:01:3d:0b:4b:8c:6c:
         50:c5:d5:a6:09:82:81:38:8a:02:74:22:72:42:99:b8:79:96:
         3c:27:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----