Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          slh9FP//vk0jryiMRHTlxD00rYI6UJ+FJeIWD7WgrVE=
Subject key identifier:   3A:A2:A8:23:C5:A0:5F:25:65:9E:D4:E1:D5:67:9F:64:60:9E:0E:8F
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       01962F067C853B28C64C1C0727331AAD8E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          022B
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: UVdPSQmUHXdi2MVK86uKP99LNMZA6ucyfCSTronURe4=)
                          2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7c:85:3b:28:c6:4c:1c:07:27:33:1a:ad:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=3aa2a823c5a05f25659ed4e1d5679f64609e0e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:a6:f1:99:39:f8:28:d8:e5:7f:06:d2:14:
                    18:4f:67:63:7d:18:73:24:c8:5a:d0:b7:64:6c:d5:
                    13:b8:1a:ea:b8:8c:56:f3:10:58:e8:3d:0e:ba:58:
                    d0:87:fa:90:a6:fb:12:a9:8d:0f:7a:f1:d3:81:21:
                    2b:c4:a7:c2:09:80:37:b0:29:5b:3c:b7:be:62:42:
                    ef:35:f3:d5:6d:aa:ad:2e:a5:70:68:36:9f:71:8d:
                    46:59:29:b7:c5:97:9e:ed:86:a0:0f:80:b4:f0:e4:
                    15:c5:46:76:a7:c2:53:55:cc:91:af:06:c1:08:d4:
                    eb:3f:63:99:03:44:38:5b:ab:b7:c4:fc:ee:f3:0f:
                    bd:fa:38:cb:e9:d6:fb:72:3b:d2:bb:54:8d:7e:81:
                    ac:9b:08:5c:d4:ef:03:cd:53:2c:8d:d5:82:4c:01:
                    32:6f:c9:fe:0c:11:bb:35:92:c2:49:24:b1:84:0b:
                    60:8c:f4:0c:bd:bb:8a:34:81:3d:0a:24:44:0d:5e:
                    2a:ae:dc:75:1e:94:e0:0b:28:56:e2:ab:54:cf:af:
                    3c:6c:95:0e:2f:2f:9a:ab:87:e3:13:36:c4:a0:3e:
                    a3:c1:c8:86:f1:42:72:4c:8e:a5:e3:c5:3e:b9:11:
                    30:84:0f:ba:71:c6:59:aa:c8:58:1b:58:83:ae:f2:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:A8:23:C5:A0:5F:25:65:9E:D4:E1:D5:67:9F:64:60:9E:0E:8F
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:39:9a:98:f4:58:d8:c7:a8:1d:29:4f:6e:56:a6:82:6b:
         1c:36:eb:41:88:5e:79:c6:96:e9:99:d0:6d:b3:03:db:08:1a:
         19:e6:af:3d:e4:d5:18:26:cf:36:73:90:ad:b9:6e:49:a7:79:
         14:df:de:3d:8f:e3:32:50:00:42:61:ab:36:6e:e7:73:cd:c0:
         e8:ee:e4:e1:9f:d2:8f:fd:ba:10:07:95:ee:50:86:4d:62:53:
         3c:52:65:76:51:33:f8:62:8f:8a:63:e7:60:b0:d8:76:d2:c8:
         09:54:33:75:5c:aa:58:f1:c5:a3:40:a9:14:50:9e:3c:b5:57:
         ab:64:a3:c6:16:d3:9a:cb:4e:ce:23:5a:d7:d4:d2:d8:b3:49:
         be:be:a4:2d:ad:a9:ef:e7:65:45:04:b9:c4:54:11:dc:bc:02:
         92:17:42:50:69:56:7a:19:c4:75:ca:ef:c4:29:73:d9:52:93:
         89:82:08:10:99:c9:79:52:d6:10:b8:0c:35:b3:91:74:89:33:
         1f:58:c2:09:be:94:75:c2:09:4c:d2:3e:27:0a:8b:a1:54:b8:
         96:15:bc:42:a6:a9:aa:bc:40:a8:ff:02:48:ca:d6:f0:7a:d3:
         3a:c9:ed:fa:3b:6c:2a:9b:d3:07:cd:00:1a:a9:cd:5d:30:3d:
         8b:6a:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----