Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          TzswIHkoR2untUS/6cDtP64et1Vmx9LaW+l6oyMwUDU=
Subject key identifier:   FE:33:31:BE:45:80:0E:4C:BA:DF:55:B7:0A:9C:62:F1:3B:4C:60:AC
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       01962F3D7C5CAFDABAF7D5347F950B6880CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: Fiht0JemH1RPZ27E25udbgiCpjldkJKGrgWpdOO9loc=)
                          2: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7c:5c:af:da:ba:f7:d5:34:7f:95:0b:68:80:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=fe3331be45800e4cbadf55b70a9c62f13b4c60ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:08:5c:30:65:25:cf:1f:59:08:2e:e9:80:
                    2a:67:ba:89:bb:ba:0e:18:e1:54:19:5f:17:3c:07:
                    a9:f3:91:64:78:4d:8b:5f:20:c8:ec:06:65:ea:80:
                    30:cd:56:d9:a7:36:2f:28:a2:00:e7:fa:fd:68:ef:
                    5a:4a:b2:5c:c9:fb:8c:bd:ce:17:5d:63:2a:09:3b:
                    f1:ad:fc:57:a7:de:47:91:53:88:1a:41:5f:4c:c8:
                    f6:fe:b9:bf:ed:5a:61:b7:8d:85:16:a3:bd:ad:5b:
                    e4:aa:e1:de:97:3a:3c:3b:69:6a:83:27:54:e4:2c:
                    7a:9c:1a:42:3b:66:07:a4:bb:8b:90:a3:01:7f:0d:
                    50:1a:5b:67:d3:20:ac:25:a6:f4:98:65:3f:ec:9a:
                    72:42:ab:e1:cd:08:7d:83:40:f5:29:16:04:3b:92:
                    0b:98:dc:c3:9f:43:bb:57:5f:92:1d:66:54:1b:45:
                    f3:8f:96:26:d5:b0:a5:3b:60:1b:ed:ef:76:92:95:
                    c4:3f:42:e2:a4:f2:2d:cc:c9:43:10:6d:31:35:87:
                    34:82:08:b9:2e:85:91:b8:7f:59:d6:1a:78:2e:e5:
                    eb:70:b4:c0:e3:d4:41:8c:32:4a:a7:a5:a5:85:dc:
                    3a:d4:3a:65:87:da:04:78:f7:83:84:96:d9:4c:91:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:31:BE:45:80:0E:4C:BA:DF:55:B7:0A:9C:62:F1:3B:4C:60:AC
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:9e:2a:d8:50:46:03:62:83:aa:6e:bd:26:31:74:09:49:
         33:8b:e3:43:25:e7:7b:1a:ea:01:37:07:87:66:d9:f5:eb:90:
         96:df:96:b8:1a:5e:86:d5:07:79:3d:d1:88:e5:8c:78:c1:12:
         39:99:04:a9:44:14:77:9f:7d:97:47:1e:73:92:99:bf:f0:47:
         ee:10:1a:e2:f4:54:83:d2:6f:6c:02:35:e8:84:cd:7c:f0:08:
         b1:f8:90:3d:22:e4:56:6b:40:14:89:b5:82:c5:8d:d9:26:d9:
         03:9a:58:48:58:a7:19:63:1a:39:9b:9e:3f:42:49:e1:31:01:
         3e:57:69:60:70:30:bf:34:6a:35:9e:65:dd:89:32:d2:78:0d:
         a8:4e:c0:81:8e:e3:a3:ba:a5:62:4e:56:75:48:6a:fd:4e:fe:
         7b:d7:90:0f:0a:8d:bf:2c:a3:c8:6d:60:86:34:12:78:be:d5:
         a7:ff:c2:f9:3f:59:e7:e6:d5:66:f1:43:91:7c:d1:be:af:57:
         e2:a0:94:6b:41:72:9b:4f:09:00:45:4b:52:66:b5:ba:74:93:
         e5:40:2e:b8:ee:6f:0e:e3:09:d2:81:5f:ea:8a:d3:fb:eb:64:
         48:1b:17:7e:1a:6d:06:fd:79:db:a1:de:a8:69:f6:2b:65:f7:
         7f:70:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----