Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          So2VN1VwD9XF+BnppX6L4RH/r0rYccOO0boOG5TG0Ng=
Subject key identifier:   5A:9B:5E:C3:C8:12:E9:03:24:7D:F3:B1:00:CE:A8:31:C4:8F:E5:D3
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       01962ECFB7D5F478E684139CCCCA085ADE47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          14FD
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: hEHnOyis5fscvn5XrjDvKcikOEH+H/XkXzGcDTOm++w=)
                          2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b7:d5:f4:78:e6:84:13:9c:cc:ca:08:5a:de:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=5a9b5ec3c812e903247df3b100cea831c48fe5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:8e:8b:e5:aa:82:f2:1d:45:c5:1d:92:98:
                    ec:f0:c4:a5:ca:fc:4e:42:90:e8:e2:db:67:89:7f:
                    1b:3d:f8:a4:38:9a:b7:30:0e:96:4a:9e:00:e2:7a:
                    ca:67:85:03:ed:18:be:ec:07:5d:ef:e8:de:1c:56:
                    90:ee:fb:64:3e:bc:0f:c6:58:74:02:03:c0:f6:33:
                    b2:f3:59:a8:22:e6:cf:7a:27:72:f2:f8:a7:1b:79:
                    ce:72:6c:68:35:be:21:b4:43:5f:9d:05:96:e5:c3:
                    86:97:21:68:03:3d:f5:7d:0d:80:c2:9f:83:1a:ad:
                    e9:3f:42:27:c6:75:7f:31:89:00:3d:5d:0d:50:f5:
                    03:20:e4:5f:3b:65:b1:85:1a:ec:81:72:0f:c8:24:
                    29:11:39:2e:47:41:88:35:aa:ee:7f:78:7f:13:b6:
                    df:32:7a:10:2f:00:35:ec:9f:7d:f4:c3:48:af:c2:
                    db:d9:9a:fc:b5:d1:e3:68:89:8b:2d:e9:55:c6:e4:
                    56:29:ca:94:58:ab:55:91:e2:29:04:9b:e5:9a:73:
                    99:af:b5:6b:8c:53:50:4e:1f:20:2c:6f:b9:32:91:
                    32:86:8d:d4:5f:28:5f:bd:3b:23:e3:e5:5d:f8:1c:
                    f6:9e:38:d9:14:fc:51:76:69:61:80:1a:84:3a:e5:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9B:5E:C3:C8:12:E9:03:24:7D:F3:B1:00:CE:A8:31:C4:8F:E5:D3
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:24:9c:9d:61:96:58:9f:f6:1e:1b:49:c2:43:63:b5:fe:33:
         b5:f3:8b:bb:df:ba:6f:5a:85:5a:53:e6:ec:ea:ff:b9:b8:3c:
         61:52:f0:80:b8:55:00:c5:d3:91:47:6a:2a:ec:2c:6d:c1:85:
         86:59:84:82:57:55:ae:f8:26:fb:59:b3:6c:dd:65:17:0d:9a:
         84:8d:2b:88:43:18:85:b4:73:58:c4:c4:b3:9a:53:8d:92:da:
         2a:b6:30:7d:01:13:97:4f:3c:9f:1f:06:f7:c1:0c:b2:69:59:
         5c:b1:40:8a:b6:be:c0:e1:a2:ba:fc:cf:d2:35:bc:f0:1b:e6:
         bb:e1:27:e2:cb:2e:40:fe:1b:f5:88:71:2a:54:48:f2:aa:ab:
         04:95:ce:7a:92:18:b3:b5:4f:ea:09:c3:8c:56:28:f5:57:56:
         46:24:c4:dd:4d:5c:54:1a:f5:db:67:ba:a7:0e:24:09:0c:ac:
         00:10:70:e1:6e:8b:f8:6b:f0:a4:f1:cc:83:c8:d7:aa:79:b5:
         da:74:52:b7:bc:08:ea:6b:3b:90:f6:fe:76:79:13:e6:d0:04:
         84:a3:bf:66:b1:73:8a:c6:3d:cd:4c:d0:e3:b2:d3:b4:5f:9a:
         61:b7:82:d8:1a:17:9e:0c:b8:c0:e6:b7:14:dc:51:5e:fa:f8:
         88:ad:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----