Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          2YUtRJtE8oRHbcT6TXXBU1VreTGlxDzT1ffQCtiyLoM=
Subject key identifier:   47:C1:22:7D:68:06:00:29:42:B0:7A:E8:F0:65:49:B6:0B:25:20:BD
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       01962F75140D3B037E550749F8CBB42C0E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          065D
Signing time:             Sun 13 Apr 2025 14:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:04 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: Y5JYl68jFHcQ1S/NXZxlSmsWchf5/XINFIWm56zxq8Q=)
                          2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:14:0d:3b:03:7e:55:07:49:f8:cb:b4:2c:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Apr 13 14:02:04 2025 GMT
            Not After : Apr 14 14:02:04 2025 GMT
        Subject: CN=47c1227d6806002942b07ae8f06549b60b2520bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0b:e3:39:43:f2:53:33:8f:ff:e8:2e:2b:b7:
                    d3:4a:ac:5c:03:5e:a3:25:71:71:f3:2f:83:1f:89:
                    a0:50:6b:2d:14:02:42:cc:49:0e:44:5a:60:ba:b7:
                    0a:ca:04:aa:a0:d9:45:a8:66:3f:b4:8d:58:f6:86:
                    ca:dc:51:1f:bd:cd:71:1d:bc:8d:71:be:4a:f6:b4:
                    8b:86:1d:6a:ac:27:70:f9:bf:eb:fc:e6:90:d1:da:
                    8b:d1:bc:69:19:ba:ee:5b:52:d7:26:eb:96:2c:3f:
                    37:39:3c:d3:38:d9:e0:49:52:b4:ef:e2:d7:b6:6a:
                    a9:e9:bd:8a:e5:9b:93:11:bd:f5:17:90:93:f9:e0:
                    3d:48:75:a5:92:1f:30:59:12:59:c4:c2:05:1b:b7:
                    2e:a1:71:6c:c2:6b:c6:82:50:d4:a1:b9:61:4f:39:
                    3c:c3:b8:03:1e:fc:ae:64:5a:3f:06:d0:2b:44:b1:
                    65:21:ca:dc:a7:db:86:e4:fd:15:cc:fa:ad:34:67:
                    75:3d:f8:4a:f4:6b:72:3a:56:6d:0a:e2:bb:18:cb:
                    e6:0b:ab:0c:ca:d6:38:cc:f5:2d:5d:fb:e4:4e:b4:
                    ca:87:79:00:8a:09:3b:af:eb:b7:29:6c:9a:44:36:
                    99:5e:9e:0f:62:1c:ef:7d:64:78:df:fe:6a:91:2f:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:22:7D:68:06:00:29:42:B0:7A:E8:F0:65:49:B6:0B:25:20:BD
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:04:9c:03:2c:b5:40:6f:03:10:d9:8a:e6:0f:d7:e3:33:
         52:28:22:40:ac:48:fe:ba:2e:26:d7:e9:1b:71:cd:40:20:ad:
         0f:66:79:f8:90:36:bd:4e:33:f1:df:e6:c8:65:e0:ea:99:0a:
         ac:bf:64:5d:5c:44:3a:03:97:6e:7c:ac:52:31:82:b7:90:5e:
         a0:b2:e8:13:91:2b:ad:f3:71:34:e4:5a:ff:32:7d:e3:87:54:
         39:49:ad:5e:c4:36:07:09:3e:37:87:f1:77:90:df:2b:ca:95:
         7c:73:63:b8:4a:d7:a1:39:67:0b:d9:07:6c:26:d2:4e:9f:67:
         36:d9:f4:af:58:bf:9d:9c:f5:95:4a:f9:a6:a6:d6:4b:e6:71:
         90:c3:ab:b3:aa:c4:a2:5d:3f:ff:9e:02:6f:88:3b:c4:66:f1:
         e3:03:d9:e4:5e:3d:7a:b6:1e:e1:14:a3:26:01:54:0b:21:a3:
         41:ee:27:fa:ae:df:62:84:43:2f:ba:d9:b6:a0:4d:48:7d:dc:
         d4:a9:f8:75:1f:7e:c6:9c:29:9d:5e:7d:a5:27:eb:c5:51:30:
         58:7b:be:b9:23:72:f6:2d:d1:83:a5:63:c7:47:39:aa:37:3e:
         e1:1d:c1:f1:5a:ab:12:cf:bd:7a:9d:78:b0:33:07:1a:9c:1d:
         c2:e7:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----