Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          KUI6sZ1YMgYjjKBZsjk/3yVHU+aXO5ecSJH8JXFyQNc=
Subject key identifier:   48:E4:C7:EE:C0:3B:6E:ED:2F:F3:DF:B4:5F:DB:EE:E1:12:96:C0:8F
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       01962F747448673C4F7B8FD91BABC9297412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          13E1
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: 6stN6axh5uVMWGhmHVtfINZOPor+q+nS0l/AVz8PH7g=)
                          2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:48:67:3c:4f:7b:8f:d9:1b:ab:c9:29:74:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=48e4c7eec03b6eed2ff3dfb45fdbeee11296c08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:0a:6c:b3:43:e8:0b:11:72:10:e0:c1:37:
                    72:08:b5:d4:9e:75:e8:51:18:02:33:25:fd:3b:f1:
                    6f:cc:f7:9c:0d:d2:f7:99:1f:36:0d:36:18:de:e2:
                    6d:07:f1:5e:d4:06:2d:f4:49:d7:4c:7f:65:f7:ef:
                    82:45:21:c4:d1:b2:0b:48:74:03:84:6b:91:ac:5e:
                    0a:41:92:40:2f:31:3d:79:ac:7d:3d:fc:09:86:4d:
                    c2:57:f1:fa:12:db:b7:d6:1b:b5:65:d6:8d:2e:83:
                    f8:96:53:1c:38:80:80:00:74:63:08:f5:76:0f:91:
                    da:48:2a:a1:a4:94:22:13:a1:69:a1:0e:33:c6:84:
                    72:0a:9c:1c:df:32:a4:54:e3:d7:c4:d1:39:93:d2:
                    f8:45:4f:b4:d8:6d:a4:bf:2a:39:0e:3b:d3:f3:e2:
                    11:fb:68:01:4d:1d:c3:83:fe:91:1e:ed:9c:a6:bb:
                    46:53:a9:00:0c:b4:c9:1e:4e:e8:d9:ba:f7:84:74:
                    0a:15:7b:14:52:50:26:20:3f:22:f7:a5:dc:06:5b:
                    02:cd:6a:e1:04:cb:f5:71:3e:03:92:bb:e1:9f:8d:
                    65:31:27:ac:14:01:d9:08:1a:f6:64:c4:71:e2:4e:
                    ed:75:c9:e0:b1:5a:3e:84:42:6d:fd:79:36:33:fc:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:C7:EE:C0:3B:6E:ED:2F:F3:DF:B4:5F:DB:EE:E1:12:96:C0:8F
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:66:dc:1b:d9:43:22:20:d7:b0:85:d2:8c:1c:07:4c:e8:07:
         96:d0:96:a4:53:4c:ce:22:e1:11:85:c0:e0:68:fa:09:01:d3:
         0b:ef:6f:77:51:5a:9e:60:be:44:ec:34:f7:e7:7b:04:c2:b4:
         26:45:1b:c1:3f:d6:cb:8e:bb:9e:3f:12:cc:dd:54:63:76:c6:
         ad:17:5d:f4:6c:df:07:67:15:2a:91:64:74:fc:64:28:db:1a:
         0e:d6:1a:27:f0:ab:65:89:de:83:ba:d4:78:51:75:71:ac:b9:
         a0:02:97:1e:8e:4a:6b:e6:50:df:58:de:76:1f:60:b1:bf:18:
         de:34:0b:de:e9:a6:a5:8c:c5:e6:97:f5:e5:1c:a4:fa:1d:ef:
         2c:9f:bd:8d:b2:4f:6f:c8:84:ab:c2:5c:6b:a1:80:40:6e:1e:
         f2:87:b7:db:3f:6b:0f:2e:08:80:74:a2:d2:84:f5:52:62:ba:
         eb:09:9e:4e:4f:31:1c:de:16:12:be:cf:d0:3f:42:9d:78:9d:
         70:7b:c5:2d:d4:94:18:9c:88:d9:65:0d:c3:0d:a6:42:5e:67:
         45:52:d6:34:7a:3e:62:65:ae:52:74:33:5c:e4:f7:3c:e9:49:
         3e:31:6a:29:92:e6:ec:50:91:83:ab:e9:d3:85:db:e3:df:9f:
         06:a6:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----