Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File:                     1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier:          v4ZTfKOg9kDkk0yw2xlEraYCZxrOreAUCrTQJ7yBrMc=
Subject key identifier:   72:D1:00:F4:A9:46:B5:BA:7F:06:B9:C6:31:57:51:EC:9A:FD:F6:C7
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       01962F3D9FEFD29751C609CD54E5B9F44D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number:          1516
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: +wMMKc2XXF1w0JzF5eTvkK2wKjqvB9YGZvEUG8Jmoz8=)
                          2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=)
                          3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=)
                          4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=)
                          5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=)
                          6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:ef:d2:97:51:c6:09:cd:54:e5:b9:f4:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=72d100f4a946b5ba7f06b9c6315751ec9afdf6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:81:3c:e1:56:f5:06:56:cd:b2:0d:60:c0:
                    f2:57:69:f9:89:3f:34:c0:c8:9f:93:17:40:e2:ff:
                    93:06:35:2c:61:f4:11:d6:3d:e0:15:9c:28:a7:97:
                    8d:fa:49:73:81:55:56:18:54:32:8f:28:36:f5:6d:
                    6e:82:78:c1:41:3f:85:b6:ce:b7:87:f2:96:c5:2b:
                    af:d3:10:cd:c7:54:e5:c7:e0:12:03:e8:fa:d1:7e:
                    4e:a6:f1:83:de:c9:8e:39:e9:87:ae:6a:dd:1e:70:
                    e3:fd:b5:d0:42:dd:13:94:02:42:28:b0:11:a8:c6:
                    a8:e6:29:fd:e8:8d:9e:70:80:1b:09:ac:f2:1e:3c:
                    e2:ae:85:93:9d:44:8a:99:1f:05:b2:2f:1c:15:cd:
                    45:7a:61:7c:6f:9d:f9:b8:ab:b4:90:13:73:a3:ed:
                    6e:d6:f6:30:13:f9:23:8f:27:cb:26:50:45:4d:fd:
                    00:7d:f1:76:6d:c3:e1:fc:90:ad:4f:3c:71:70:a1:
                    61:42:63:1e:8f:74:37:d9:8b:4f:ff:a4:fd:1b:95:
                    a6:ee:cd:14:52:1d:ab:52:13:2e:fa:40:ec:18:7f:
                    7e:14:95:9d:48:89:41:81:6f:44:63:57:d3:41:c3:
                    2c:69:24:e2:48:b6:bc:a3:f5:50:24:26:f8:a9:98:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D1:00:F4:A9:46:B5:BA:7F:06:B9:C6:31:57:51:EC:9A:FD:F6:C7
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:b6:82:2f:44:90:13:9c:3b:86:04:c2:09:43:99:9e:04:
         8e:04:67:f6:27:3b:91:36:81:13:a8:3b:92:ac:a1:01:8f:75:
         68:f4:a8:3f:31:ed:6c:42:77:3a:a7:1e:60:b5:b0:d8:d6:c9:
         f5:d6:fb:f7:5f:40:44:23:91:32:0e:44:04:84:86:f6:78:e3:
         e2:cc:1e:b4:1f:c1:63:be:7e:ee:3e:62:4c:6e:68:0b:2a:3d:
         1d:e9:85:10:cc:c6:01:03:2e:ff:f5:e2:5b:22:52:52:73:c1:
         88:ba:0f:03:d6:36:b8:aa:ea:73:4b:68:c5:98:5e:7b:06:22:
         bc:ec:c9:85:f4:ad:d1:9a:e1:17:60:fb:fe:57:aa:04:3f:1c:
         90:e7:f9:92:fb:a9:23:20:4a:49:14:48:43:2a:9d:00:72:e4:
         5d:67:ba:9e:a9:66:1b:ac:d8:1a:26:81:32:1b:89:50:52:0d:
         6b:f9:26:b5:b8:44:eb:59:48:25:b0:51:57:49:43:88:1e:7f:
         ba:d1:96:10:dd:b7:31:49:0b:76:3e:b5:81:9a:9f:38:b1:75:
         06:85:f5:52:7a:27:63:60:35:e9:78:1e:3f:6a:38:5a:d9:3b:
         17:f2:e6:b1:eb:1a:0e:6f:9a:d8:b6:02:f7:9a:1b:3f:2f:54:
         45:84:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----