Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          r2U72BabwqYNMGXuwusYn4iUf4f6ViO2gwOA7DEEkmw=
Subject key identifier:   BA:8E:FF:03:BA:ED:91:EB:32:84:AE:D3:D3:6F:35:4E:7D:5F:62:61
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       01962F3D9847CC957BB05257CB2FB3E4BAC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: TNH6J6A297I0DN05MRtn+QBH8jQu/ePHnOWVl5akOHk=)
                          2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:98:47:cc:95:7b:b0:52:57:cb:2f:b3:e4:ba:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=ba8eff03baed91eb3284aed3d36f354e7d5f6261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:2e:31:8e:02:d0:ff:d5:e0:f8:3a:83:5d:
                    7d:9b:44:8b:c1:ca:dc:be:bb:37:6d:64:b4:0d:9b:
                    cc:c0:76:8b:eb:74:9a:ad:a7:0b:e3:52:cb:b3:7b:
                    f5:f7:ea:73:77:ba:dc:48:69:d3:2b:21:cf:ab:77:
                    a4:92:88:87:79:e2:c2:7f:30:62:b8:f5:e9:87:5a:
                    99:cc:ab:dc:ea:07:d6:a6:4d:56:22:ab:72:7d:0f:
                    f2:37:c1:7c:5c:88:70:cb:13:ab:3d:f3:da:33:fe:
                    42:72:46:8d:57:b8:9c:59:f1:e1:76:18:89:8b:22:
                    9b:9c:94:8b:cb:8f:0a:14:f9:e1:41:74:7b:93:a2:
                    5b:32:03:b3:36:a1:3d:50:c6:01:f0:78:e3:1b:2f:
                    71:e4:a1:19:9a:93:5b:10:54:80:f0:73:d0:1d:f1:
                    e6:97:fc:5d:7c:2d:89:5a:13:c6:8e:74:3f:e6:90:
                    10:13:22:1d:d2:44:72:88:e8:de:c7:37:98:76:ab:
                    7d:b6:a1:2a:55:85:ae:93:bc:a8:f7:a1:4a:f8:c2:
                    44:bb:77:c2:bc:65:3e:b2:ae:14:5b:2e:36:75:1b:
                    e6:1c:9a:e7:5b:2a:1f:18:75:bf:bd:e0:0e:ad:c5:
                    f2:5f:a9:9f:77:3a:fc:e0:1d:43:3f:75:16:31:83:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:FF:03:BA:ED:91:EB:32:84:AE:D3:D3:6F:35:4E:7D:5F:62:61
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:17:d7:67:21:37:20:92:31:5a:cc:89:93:6f:70:db:67:
         22:d3:aa:cb:88:99:46:ee:a4:ad:5b:4f:4b:2e:11:56:cd:e9:
         d7:c7:cc:0d:58:bf:5f:91:d9:01:b1:02:b1:42:0e:07:eb:99:
         3c:f1:59:cf:9f:20:fe:3a:5a:6f:e4:a1:43:6e:c6:78:f9:3b:
         fb:3d:74:1f:01:25:da:e1:0c:bb:20:e3:69:c2:2a:b2:53:d6:
         f4:87:51:a0:bb:22:e8:16:34:25:0f:08:ed:9c:4c:c0:31:e4:
         e0:13:08:4d:d8:cc:45:ed:23:76:d8:fa:19:10:4b:c6:e7:27:
         9e:99:28:cd:3a:26:90:1e:c6:24:1c:57:10:cc:4b:a0:65:7a:
         a7:6f:8b:18:7b:e7:07:61:37:43:be:1d:05:b1:df:c7:28:15:
         7e:8b:d0:03:f1:f2:10:6c:4f:d9:f7:84:44:68:df:4c:f7:f7:
         24:68:3d:62:0f:2d:87:44:69:3e:4d:fd:74:56:63:46:c3:d0:
         65:d6:5d:da:2b:dd:34:bb:59:c7:75:f7:a9:75:ea:d8:f4:6a:
         52:66:f4:2b:88:83:8e:29:b8:38:05:45:97:1e:14:b6:a8:94:
         68:7e:2f:e4:19:78:16:e9:bb:b2:eb:2f:f9:07:d9:0d:51:5f:
         fe:56:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----