Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File:                     fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier:          mHyQwuAfC7UNKkfFR2Ozi7UdeVGR4iVgPVMfmKJIZPg=
Subject key identifier:   8F:BE:D1:52:6D:56:B6:BA:2A:26:35:AF:8A:4A:19:60:92:AB:3C:9E
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer:       /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial:       01962F3D7E0137D050D5E612B883AF4748C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: M9qNJvC_kcwpwY04nD9scW455qU.roa (hash: 3RMJRIwbxzvUUPiZWVxoeQuqeF3pwso/hbH6wuXsN8I=)
                          2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: gTtmZcv/up+jbYLrvpGH/ptjoqJ9ompoYjFYPJkptPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7e:01:37:d0:50:d5:e6:12:b8:83:af:47:48:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=8fbed1526d56b6ba2a2635af8a4a196092ab3c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:25:f0:68:84:6f:5d:13:8b:9b:cf:0b:ec:10:
                    fc:eb:2c:0d:be:6c:59:e3:f6:1e:a0:41:8e:25:92:
                    39:71:80:46:07:be:8a:39:52:16:9a:5c:71:94:49:
                    e2:d8:73:25:96:14:08:14:06:8d:c4:34:59:9c:5a:
                    0b:a4:e7:75:d4:4d:07:4e:45:ac:c8:82:a5:80:ae:
                    5e:2b:76:05:9c:f2:02:f1:6b:38:b1:d3:b5:7f:35:
                    84:58:a9:4f:63:df:3b:9f:9d:2a:40:4f:25:0e:1b:
                    4e:a9:fe:73:b6:fe:b2:cd:80:13:53:86:e9:5a:6e:
                    bb:53:53:ea:2f:6b:d2:d9:7d:4d:71:14:30:43:7f:
                    31:1a:00:aa:41:33:f2:e3:fb:e8:22:b3:f6:67:45:
                    97:43:43:fd:24:7f:ad:ab:5d:31:7c:90:48:b7:ac:
                    f0:04:c7:e1:22:1c:e1:02:a9:9c:4d:27:63:c9:51:
                    cb:b8:00:a6:a2:5e:dd:56:f6:f4:88:5b:e4:e7:09:
                    1b:61:f2:91:71:6f:80:90:49:38:e2:4d:4c:bd:55:
                    81:68:fc:3f:60:c7:87:27:88:01:b3:ae:ba:ce:a6:
                    e6:3d:09:5a:cc:a8:56:eb:08:07:f7:79:64:f6:f1:
                    08:92:52:6a:e5:5b:d7:8a:87:14:3b:9d:85:f8:40:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:D1:52:6D:56:B6:BA:2A:26:35:AF:8A:4A:19:60:92:AB:3C:9E
            X509v3 Authority Key Identifier:
                keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:20:21:63:93:d3:33:fa:30:e4:10:60:5a:e7:48:e9:ea:
         5f:fe:37:28:03:a0:08:be:89:ef:f4:4b:5e:bb:c6:be:40:d9:
         3c:36:7c:c6:b2:58:7e:55:7d:43:a5:5f:cf:95:83:24:a2:ff:
         af:c4:5b:07:c6:17:c4:03:03:a6:e0:41:f7:eb:7e:c6:f7:7b:
         a6:fa:cc:72:03:6e:0f:1a:cd:a2:de:56:27:1b:e6:fb:7b:ad:
         4f:c9:69:66:9a:4d:3d:2e:d1:fd:6f:ba:d9:29:f9:09:26:df:
         c3:34:f7:5d:04:6c:1c:da:36:02:ee:15:25:0d:e3:e7:fa:22:
         c9:66:8f:c7:07:53:fc:fd:72:dc:d5:5f:51:db:36:3a:1b:8d:
         5a:26:2d:6d:7a:6a:48:c5:86:9f:7b:e0:41:ce:87:7b:94:41:
         f1:14:c8:e4:f4:e6:78:4b:02:ea:0d:f2:84:a0:d6:4d:3e:86:
         93:42:b0:11:4a:04:ee:af:8b:b1:f6:1c:ad:3b:52:1f:e9:57:
         25:3a:00:e8:8d:94:71:17:c0:f3:c3:df:91:d5:67:49:f7:6f:
         0d:34:57:be:bb:85:cc:98:0a:09:2b:c3:5f:f0:cf:c6:cf:f6:
         46:4f:65:0b:14:e7:5a:0d:34:3e:ad:93:a3:6f:ca:a5:66:e9:
         52:20:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----