Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
File:                     Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json)
Hash identifier:          FaQHZAXJZYSXrH50ZfBFMbrf0eLdxXA46F7TCsa5HcU=
Subject key identifier:   74:26:4F:70:7A:97:EA:11:E6:9E:DC:B2:C7:24:E6:AB:7F:D2:56:47
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Certificate issuer:       /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial:       01962E61D78DA01516FE876767472185E04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: gb8Bj+hvCNsQi8/Hc+DC3P8Z9bRQbvlgLk3AO1uvtjU=)
                          2: Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa (hash: P6IjosmlOiqXveubqIomO6KehA4R0g/PyjiODsr89zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:8d:a0:15:16:fe:87:67:67:47:21:85:e0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=74264f707a97ea11e69edcb2c724e6ab7fd25647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:c2:0a:43:df:88:3b:38:08:bd:01:82:40:
                    23:69:dd:ee:d7:16:44:5c:5a:7f:44:a8:93:ca:9e:
                    f6:db:76:94:3a:e4:c4:ad:9b:41:d8:0b:6b:43:4e:
                    c9:41:05:27:c5:9d:2d:d9:aa:6f:57:f0:cb:a8:50:
                    16:41:42:a9:16:1f:c5:15:f6:0e:03:77:5b:36:05:
                    0f:b5:0f:d1:42:c7:66:09:ac:dc:bf:a5:fc:e4:94:
                    78:db:27:60:30:9f:03:71:7a:f9:95:bf:ee:76:d3:
                    94:ac:57:1a:63:85:f3:4a:ba:e9:e9:a3:53:ce:f5:
                    cf:4f:54:7a:2e:12:20:70:61:19:15:96:77:cc:7b:
                    8a:27:b9:ae:c0:3a:91:e2:4e:37:c2:8e:0a:ab:48:
                    fa:62:f0:54:be:1b:ce:c1:2a:28:d4:86:d5:09:d4:
                    04:a7:3b:2f:e6:04:63:0a:52:db:91:40:25:62:ab:
                    2f:88:2d:0b:e0:69:4e:7a:50:04:4d:22:eb:12:f4:
                    0f:b6:eb:aa:cb:55:06:f7:d3:6e:3f:42:62:5b:2d:
                    a4:12:0a:f2:97:f2:b3:b3:14:49:1f:1f:cd:ab:d1:
                    44:77:2a:7c:cc:e9:91:f5:5f:96:20:1c:e9:a0:7f:
                    fb:76:5a:88:04:3d:be:98:da:f7:fa:e1:72:af:70:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:4F:70:7A:97:EA:11:E6:9E:DC:B2:C7:24:E6:AB:7F:D2:56:47
            X509v3 Authority Key Identifier:
                keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:d6:a7:e3:c9:da:1d:d3:74:0e:cb:8b:41:c2:b1:ca:40:
         00:a6:55:fd:a9:84:12:4e:d8:c2:d3:0b:06:66:e3:f8:bc:1e:
         ab:94:d8:8b:e3:f6:03:0e:52:91:68:0d:b8:6b:de:da:a9:92:
         34:7b:3f:78:b3:db:d7:c1:66:bf:b9:82:1d:ca:8d:99:b7:eb:
         6e:ee:df:0b:16:95:68:35:cb:2a:4f:09:57:a5:c6:97:36:a9:
         c7:1d:6c:9b:62:64:41:3e:40:66:29:56:5f:ca:82:c0:0a:99:
         27:61:8b:3f:3a:74:6a:b9:9f:e8:40:ac:fc:84:cf:75:47:9a:
         67:1f:3d:d0:1f:4c:04:97:97:8f:e8:df:e3:dc:f3:f4:53:23:
         f4:5f:3f:d4:92:a6:9f:64:1f:f1:8c:a4:9f:fb:ad:85:7a:c2:
         17:0f:25:84:1b:6a:c3:62:41:4a:b5:41:89:7a:49:26:c4:0c:
         7f:c5:21:30:07:75:97:b3:81:c5:ec:c4:da:b6:70:6d:ba:61:
         39:cf:e5:83:ba:b0:cd:e1:3c:8d:08:37:99:08:84:b3:89:5a:
         95:bb:89:77:29:b7:c4:ba:5c:51:01:c2:81:b2:f3:b4:49:b3:
         3a:27:5b:f4:1d:07:6f:c3:ab:0d:7e:c8:76:5f:26:77:cb:ff:
         d2:f7:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----