Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File:                     1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier:          qgRV7MbPr5Qpmi77FBEu7bLHzODuWVLe2QptP9MyIuM=
Subject key identifier:   9A:24:2C:30:7B:02:4C:12:24:CC:7B:F8:CE:32:3C:70:1C:E3:3A:AA
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer:       /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial:       01962E2B4CECEF6571B4056B0F53EBE9F088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: KxWEhZ99ZOh69LR/v5wFjvGuBOoTo5HUv3gTMJxmwGs=)
                          2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4c:ec:ef:65:71:b4:05:6b:0f:53:eb:e9:f0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=9a242c307b024c1224cc7bf8ce323c701ce33aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:85:dc:8f:f5:e0:ed:08:aa:27:3e:33:78:ec:
                    e6:95:ab:0f:24:88:8e:65:28:86:91:b9:56:fb:54:
                    c9:d9:a2:e1:d2:3f:93:2a:e6:1b:b8:47:56:3b:d9:
                    b2:a2:26:24:4e:ad:d2:c3:02:28:16:7c:3b:e8:00:
                    bd:93:fb:fa:3e:d3:45:11:87:d2:1f:aa:d5:a3:11:
                    9e:87:7e:ca:8a:dc:3f:e9:88:82:39:cc:91:16:ec:
                    4a:a6:10:2b:f1:39:26:c7:20:32:d9:9c:72:f9:79:
                    6f:5e:2e:07:9c:ee:19:da:ef:44:96:af:e1:64:18:
                    2b:3a:6e:1b:dc:28:df:c8:df:2b:d8:e3:81:e1:f0:
                    37:13:ae:9f:b6:14:0d:7f:75:b3:04:18:24:a7:0e:
                    f9:2d:6e:3b:b3:0e:ea:f8:fd:ce:62:53:d8:f2:06:
                    1c:a7:b8:88:c0:61:ef:49:fd:95:b9:81:cf:0f:4f:
                    17:4f:af:56:3f:a5:79:dc:75:64:37:5c:f2:72:6c:
                    55:83:7d:a3:f5:0d:13:88:04:0a:07:69:f6:95:2b:
                    79:92:85:ed:29:2a:6c:1d:83:8b:a6:d3:63:59:50:
                    0e:b5:a9:56:89:e1:8b:cd:2d:44:6c:fc:68:0e:7a:
                    0d:34:ac:8a:fd:45:ca:97:0b:8b:1c:67:ee:88:bf:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:2C:30:7B:02:4C:12:24:CC:7B:F8:CE:32:3C:70:1C:E3:3A:AA
            X509v3 Authority Key Identifier:
                keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:d7:de:e6:0b:ca:c4:e6:61:ab:32:14:ad:bb:1c:64:27:
         8e:ec:f7:c3:0d:b8:c5:ff:e5:2a:66:f8:64:7c:23:c1:85:45:
         27:ee:a1:43:9c:44:29:0c:26:b6:12:7d:78:d4:59:5f:a1:5b:
         6d:8d:b3:f0:31:8b:9d:8c:c3:53:eb:39:50:77:f0:c4:3c:c3:
         47:76:7b:b2:68:b5:7b:63:c8:19:e4:6a:90:de:36:8a:80:87:
         45:db:c5:bb:a9:f4:a0:99:94:ef:6c:cd:58:1e:15:16:84:e0:
         3c:1b:c7:4a:b0:8d:50:a1:dd:91:a1:8d:87:3f:ca:c5:14:82:
         ab:e7:1d:5d:6a:84:5f:73:85:7c:dc:30:aa:72:b1:3d:f1:83:
         4f:ae:0b:c9:4e:e0:70:16:be:10:28:14:c7:a4:97:b9:e0:36:
         64:5d:7a:e1:34:a1:c8:7f:6e:19:e5:58:8f:e8:d2:19:45:ab:
         98:c0:e6:cf:71:62:5d:ef:08:26:c8:42:a6:6e:9b:d1:0f:74:
         20:42:c6:1f:de:1b:d4:28:fd:6a:bf:bc:24:64:ae:7c:dc:ce:
         97:9e:71:b1:39:ae:0b:8e:3e:03:fd:9d:30:e8:e7:e7:93:f6:
         a7:2e:f7:d8:07:4d:28:37:24:85:0d:c2:a6:ca:b8:c7:a9:f1:
         7a:82:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----