Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
File:                     FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft (raw, json)
Hash identifier:          ek7Yyl3h3nMLaj98rf159Vgu+3rR4BLPjszNxW0yrqo=
Subject key identifier:   06:04:B8:06:E9:97:52:7B:51:C7:0B:55:D6:FE:81:26:D9:A7:DD:CB
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Certificate issuer:       /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial:       01962E2AE54153D6A1A50F89CD49ABE27330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
Manifest number:          06A8
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl (hash: 6f79+kX3d7OOJXedfnYE23/8amHiToUIdHSZSduVWr4=)
                          2: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (hash: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:41:53:d6:a1:a5:0f:89:cd:49:ab:e2:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=0604b806e997527b51c70b55d6fe8126d9a7ddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:24:91:57:7d:c7:dc:60:c9:4b:01:a4:a7:
                    bb:66:b9:e8:a8:c4:6d:7e:06:cf:06:7e:66:57:7d:
                    70:0b:c8:fe:98:7d:64:be:ae:a7:96:59:23:ca:e1:
                    16:29:74:0a:e8:a4:15:1c:4f:b3:69:9b:da:7a:c3:
                    dc:79:2d:96:96:a7:da:46:04:fd:97:f5:ab:e4:cb:
                    f9:7d:ed:7a:29:49:00:47:f5:2f:4c:b7:f4:b3:1c:
                    bb:07:f3:51:39:fc:18:56:b8:78:48:d7:29:1b:1a:
                    8f:c1:24:b6:6a:1b:07:c7:a7:a9:d7:f3:c1:4d:5b:
                    57:02:08:6c:d1:b6:b4:8a:b5:46:85:a4:0e:e9:33:
                    e8:cc:7e:7b:0d:bb:26:8b:9c:d5:86:d7:39:69:75:
                    73:15:02:8b:65:47:84:cc:f2:50:22:71:31:c4:b3:
                    a3:20:3c:ec:1a:fc:cb:94:c7:89:8d:d0:c1:fd:6f:
                    aa:c1:57:21:de:a4:91:8e:95:d6:e3:6e:17:f6:51:
                    9f:db:f6:dc:2d:6d:00:6c:f0:c5:11:80:10:5a:40:
                    fe:88:61:a0:8f:f1:ac:a2:d1:38:c6:87:89:7e:55:
                    9a:7a:e6:d2:3b:a6:14:60:5a:88:9b:7f:3f:05:4e:
                    f5:5d:18:6b:ec:ed:b8:ce:ad:17:27:07:48:06:1e:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:B8:06:E9:97:52:7B:51:C7:0B:55:D6:FE:81:26:D9:A7:DD:CB
            X509v3 Authority Key Identifier:
                keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:79:a5:a5:4c:8c:c4:f1:f8:fa:22:36:38:36:aa:e5:66:c3:
         ef:75:1b:60:ad:2c:69:28:7e:81:3b:71:cd:f6:ad:39:78:b4:
         a5:1f:08:cd:1e:a7:5d:18:d7:c4:a2:a0:8d:9d:61:79:02:ef:
         dc:40:f2:a5:34:3c:7d:e9:5b:48:cd:69:6c:5a:aa:78:10:c1:
         0c:13:1b:76:da:da:16:73:ca:c9:f5:e6:38:c5:0b:5d:a2:db:
         fa:66:8e:54:80:08:1c:c0:43:4c:81:f2:1e:cf:e8:f1:08:ec:
         4c:ca:ec:30:5f:63:6b:21:19:34:82:3e:b4:cb:be:06:10:33:
         b1:15:de:a1:ff:75:40:6b:bd:15:46:4f:7c:31:f6:51:e4:28:
         89:87:cb:31:67:8e:02:88:cf:e7:0b:a7:bd:c8:95:9c:0a:be:
         97:73:eb:18:e3:c6:c6:d9:0c:8f:bc:05:09:6a:2e:46:20:e2:
         a3:8f:97:06:c4:17:aa:49:66:95:f2:a5:14:4c:4d:f8:44:38:
         32:66:d0:c6:89:36:70:af:4e:44:f7:03:b7:d8:08:15:e9:a2:
         d0:5f:38:99:98:b1:8b:66:87:cc:f0:5e:71:da:7d:1d:f0:c4:
         96:bc:b5:56:9e:1e:1b:73:bb:fe:bb:65:c9:25:69:79:b2:50:
         d3:ac:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----