Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          kZMX99Ttmo2b5AJQzjRCf61yUFy71FuYl4kYmMPVBCc=
Subject key identifier:   D0:96:5D:1D:8E:DA:B0:19:01:14:19:D9:AB:D7:20:60:52:95:8C:B8
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       01962F74B7AD03A968C2748C5999735604E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          0DC5
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: UzdPC2Nc1O3bXNLdCnMSZn84qmbHyisztyVCRV4fhIA=)
                          2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:ad:03:a9:68:c2:74:8c:59:99:73:56:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=d0965d1d8edab019011419d9abd7206052958cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:b0:48:94:66:f6:19:6b:0e:2c:6b:35:0f:
                    d0:a8:53:7e:57:71:b6:0b:4d:5c:0d:77:d3:a0:f1:
                    08:7a:d1:b2:59:0d:aa:0b:fd:58:03:e0:e4:fb:b8:
                    55:db:34:1a:c3:f1:bd:78:21:f8:cd:4c:3b:b3:c4:
                    b9:e4:a9:6b:8b:35:68:aa:20:f6:37:70:fc:9d:41:
                    0d:d9:9b:73:c7:89:a8:a3:db:68:27:8c:0d:b2:19:
                    c1:e0:60:a5:99:03:9f:9e:88:e5:f3:03:bd:ea:b0:
                    6f:1b:6c:56:3e:f7:64:84:af:f7:bb:d1:97:07:c5:
                    d0:ee:ba:79:c3:3b:14:10:eb:9b:d2:92:f9:19:92:
                    b9:9e:08:93:2e:e3:98:13:2e:43:e9:63:05:d7:5d:
                    58:11:31:c3:21:7a:e8:9d:ed:76:77:a4:a2:01:f1:
                    19:8b:cf:a9:eb:ca:72:ae:d9:b8:88:8f:56:77:95:
                    7f:87:7d:e0:fe:cb:d9:42:37:20:fe:23:37:41:07:
                    af:51:ea:c4:ce:dc:7b:c8:b0:0c:06:94:cb:4d:81:
                    14:5c:ae:a5:e6:48:0b:11:3d:2b:20:69:d1:16:61:
                    35:6b:6e:0b:df:b9:26:a0:6c:dc:05:29:36:15:cc:
                    c5:c8:15:1d:86:57:97:5e:04:0d:55:64:4a:6f:fb:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:5D:1D:8E:DA:B0:19:01:14:19:D9:AB:D7:20:60:52:95:8C:B8
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:af:78:7c:b0:2a:1b:08:dc:57:b4:6d:22:a1:02:10:ae:
         4f:db:6b:09:e1:40:f9:9e:ad:d5:e7:09:6a:68:89:2a:45:55:
         10:8d:ec:77:83:98:37:48:7e:c7:46:9f:04:ac:ea:db:eb:89:
         89:bd:0f:65:40:21:db:cc:39:bc:69:69:ac:c6:1d:3b:b5:06:
         a3:41:6a:56:01:8f:15:e7:b7:5b:a3:27:33:e3:89:93:73:84:
         4a:f6:a5:ea:e9:8d:a8:aa:6d:90:f6:82:99:e2:5d:c3:e3:ff:
         da:34:cb:a9:be:48:25:26:9c:44:a7:12:36:3e:3b:7f:90:5a:
         61:9a:46:fa:23:49:2d:0a:87:56:c7:ff:f2:eb:d1:a7:3b:5c:
         c8:85:ea:b9:12:8e:c5:f5:cd:b6:b9:9b:c7:00:9d:7d:e3:2d:
         34:9a:58:af:19:9f:50:d7:be:51:48:9b:f5:aa:e0:86:81:fa:
         1f:b1:7a:0d:76:13:69:85:28:7f:6f:04:8a:ea:9d:a9:e2:9d:
         fd:13:c9:d9:ff:4b:db:03:48:9d:bd:22:31:5c:bf:2c:2c:d4:
         63:24:41:ce:fb:d9:a9:9b:62:0b:09:ce:c5:58:4d:08:b8:87:
         6a:53:47:7b:d0:2c:4c:dc:d5:8f:a5:a7:19:28:63:25:01:e6:
         28:e2:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----