Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
File:                     fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft (raw, json)
Hash identifier:          k6W1Oo5VMGdIyt6RwxUQHHBwWmgFFyQW77kB9cj9+iM=
Subject key identifier:   45:D3:91:B1:36:2A:BF:B4:CB:4A:B9:D6:E0:6E:65:06:62:62:9E:D6
Authority key identifier: 7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Certificate issuer:       /CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Certificate serial:       01962F06A7DA3ACE5049828BB8A07C3614A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft
Manifest number:          03B3
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa (hash: iEhvmxCDWE4QgoN0KDVC0nYZp80ZbJ35iTC3GWKtUXU=)
                          2: fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl (hash: s3lEWm93fXoCfY/ENPn53E65oRia7evrMx6clojSjNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:da:3a:ce:50:49:82:8b:b8:a0:7c:36:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=45d391b1362abfb4cb4ab9d6e06e650662629ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:05:9a:ea:47:44:d2:69:37:bc:5c:25:7c:
                    60:ee:ac:1b:86:18:47:cb:c4:64:7b:d4:58:0d:8d:
                    37:63:76:86:19:3b:6d:a9:ef:df:45:43:5e:c8:75:
                    e6:b3:b4:33:12:ce:1a:5d:80:b4:6c:5b:52:2e:62:
                    cf:d9:e9:80:fc:bd:84:3c:7a:fa:fa:51:00:9b:70:
                    2b:ab:e1:a5:6e:f1:e4:48:83:c7:31:b0:e2:67:7a:
                    cc:02:46:b6:cd:6b:b5:e1:2e:fc:f5:38:8e:31:22:
                    88:58:9e:e9:b7:cb:ea:80:24:ff:8d:72:46:e3:d5:
                    42:91:84:53:57:1e:66:23:9e:6f:44:31:1f:99:58:
                    56:52:69:c3:d6:44:52:fb:ae:a6:47:b5:19:0a:e0:
                    e0:1d:00:b1:19:b1:cd:be:44:9a:89:6a:f2:46:53:
                    dd:84:0a:b3:51:3f:a1:55:71:8a:9a:d9:ec:e0:5f:
                    c5:56:d5:c7:2f:91:4d:db:6d:97:c1:f7:81:ff:94:
                    80:1b:26:d1:32:a4:27:e5:0c:b4:9f:3b:18:b4:56:
                    7b:07:23:2a:d4:29:8b:5a:ba:7b:6d:78:cb:18:c8:
                    2b:ed:70:bd:77:f0:28:09:28:2d:bd:2d:2e:07:e6:
                    3d:4a:cb:92:8e:01:e7:36:f5:80:8a:88:da:58:93:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D3:91:B1:36:2A:BF:B4:CB:4A:B9:D6:E0:6E:65:06:62:62:9E:D6
            X509v3 Authority Key Identifier:
                keyid:7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:4f:30:9a:77:8c:c9:c7:e3:05:73:8d:9d:16:64:3b:0f:
         85:f6:66:b4:67:5f:1b:cd:88:9f:7f:af:b1:13:0c:aa:0a:c3:
         4b:30:c6:5f:6f:19:cc:62:d9:1e:49:4a:45:76:8c:91:51:1c:
         0c:3d:58:e4:be:39:58:44:82:20:ab:38:8d:59:13:82:5d:4c:
         98:46:41:f3:d4:fd:8e:0d:24:5b:97:35:96:c2:c7:29:77:27:
         01:21:65:f8:fd:67:13:87:92:c6:87:bc:04:04:06:00:0d:d9:
         31:fd:87:8b:ee:76:10:24:c1:50:66:4d:6e:17:2e:48:e5:b8:
         d7:7e:69:b1:44:63:c1:2c:26:29:63:1a:30:b9:d5:e7:fb:2c:
         89:59:f9:14:8c:58:f4:d6:f7:80:03:60:9e:e7:91:aa:f0:d3:
         9a:3c:45:79:01:39:7c:ba:55:df:ce:6d:4c:0f:a2:8b:d8:5e:
         37:a4:f0:13:53:9b:d9:b4:f9:1f:93:26:17:45:cb:fe:a1:b9:
         f2:48:46:3f:61:de:50:3d:d7:8d:0d:80:f0:62:b9:df:e7:6c:
         fc:e3:cc:42:e1:43:b4:71:24:85:94:67:95:3e:43:73:85:50:
         a1:9a:7d:6d:8d:e5:f9:67:16:8e:ee:e0:13:60:4c:16:1d:3d:
         84:b3:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----