Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File:                     fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier:          P8uURZSVO/oF+/lIhMCQTXB1kMKRE6ihljPl5sp+hHQ=
Subject key identifier:   7E:31:A9:04:8A:B0:8A:A5:45:3D:25:07:35:5B:90:C4:E5:4C:B4:FF
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer:       /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial:       01962DF3DAE7043C20B28176C8D3710ABA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=)
                          2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: 1O3+CqMVoMHdC7b9TQRJLU8aufO0F6gFy33r+heG+es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:e7:04:3c:20:b2:81:76:c8:d3:71:0a:ba:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=7e31a9048ab08aa5453d2507355b90c4e54cb4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:9d:a7:7e:4e:0b:09:9d:11:31:ad:82:57:
                    02:40:38:60:fa:d3:5e:8e:8c:5c:a9:64:f1:b2:49:
                    67:35:d1:13:56:cf:fd:d7:f4:9e:26:90:3c:1b:67:
                    9f:8f:5f:5e:8a:42:39:01:00:03:3a:cc:3c:3b:a6:
                    31:f5:72:47:c2:36:b6:a6:02:2d:d3:a3:46:34:82:
                    c4:71:05:26:a2:93:c1:fd:a1:ba:f9:3e:0a:b2:cd:
                    1d:97:69:5d:ed:2d:4a:1a:1a:10:65:3b:a3:b4:89:
                    b1:78:27:d3:d3:1d:5f:64:fd:7b:b0:75:7e:ac:6d:
                    5e:84:87:ed:69:0e:b7:ed:0f:ff:4e:75:24:09:2c:
                    d6:f8:a7:35:e6:ef:5f:96:ed:73:b7:86:8b:34:89:
                    a4:69:cd:92:ab:19:e7:51:10:25:07:8b:e9:73:ee:
                    63:04:8d:79:48:a9:63:9d:4a:de:52:7a:0f:e4:39:
                    36:9a:1b:37:f0:ca:0a:60:f5:47:1e:79:c9:86:c5:
                    ea:e7:cd:46:9a:2f:4e:40:29:fa:7c:62:c3:1f:5c:
                    88:02:fb:bd:ee:4f:0d:9a:8f:37:26:ee:c5:ac:18:
                    6f:25:39:23:f8:b3:99:61:be:d6:e2:49:73:bb:36:
                    47:07:42:1c:ba:55:a8:9c:40:1d:bb:1c:b0:94:d3:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:31:A9:04:8A:B0:8A:A5:45:3D:25:07:35:5B:90:C4:E5:4C:B4:FF
            X509v3 Authority Key Identifier:
                keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:fb:1a:e1:a5:18:1b:fb:ee:91:93:34:df:45:27:1a:80:
         42:62:8d:4f:7f:88:0e:24:9d:36:93:ba:b8:53:51:df:34:79:
         26:a3:09:f5:7f:4a:8d:a4:9d:75:5e:dc:31:b1:28:1d:d3:c3:
         40:68:e0:64:82:2f:84:2a:87:b6:f9:7a:37:b2:fb:36:44:b5:
         bf:78:67:12:6f:c7:28:e1:e3:6c:0e:b5:42:40:9f:17:39:c8:
         4d:c8:69:91:5e:7e:7c:89:3f:b1:52:e7:b5:ac:4a:e2:34:23:
         be:e2:d9:31:8f:f5:4d:de:3b:83:09:dd:37:93:27:79:7c:0f:
         ad:5e:5b:c3:f2:25:13:c3:67:fb:83:ea:a1:12:79:91:85:73:
         74:e4:87:6a:7b:3d:22:1b:93:44:34:1b:51:0d:90:da:06:c9:
         58:e6:a5:3f:e0:62:a2:ce:3c:14:58:a6:5c:58:fd:33:7a:d4:
         8a:14:8b:20:46:8e:cd:30:7a:0e:d9:61:85:d2:73:d3:d6:51:
         b4:55:2a:c9:98:8f:ba:73:9a:91:82:b0:8c:7b:80:26:42:f9:
         85:14:74:8b:4a:04:e8:4a:ae:68:ed:94:0e:8c:43:4f:75:26:
         ae:cd:ca:b8:d2:7e:c1:4e:bc:cd:ce:5d:45:82:fe:28:69:64:
         59:5e:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----