Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File:                     fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier:          fgL2HqOmMJFVB7ig48F8kSFHOK3n72P5AH8e2fm+ERs=
Subject key identifier:   1E:75:D6:9D:D3:EE:EC:8C:3D:90:5C:1D:D7:E9:C5:1D:08:61:B3:56
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer:       /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial:       01962F7459D1F5B0E4C70B609AC01188E6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number:          12C0
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: 0tq5kgZAzDMqnviitVn_OQYTHsM.roa (hash: gEsfs30k2T4OAeytJOfxkkrnBmtQHoikoZxrs0lJ3gs=)
                          2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: 7wLnRSKCz69S3kDawgNpY8/Ti/KyJXc3wo/ezR8nkGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:d1:f5:b0:e4:c7:0b:60:9a:c0:11:88:e6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=1e75d69dd3eeec8c3d905c1dd7e9c51d0861b356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:36:e6:3d:bb:0a:01:c3:fc:53:4a:55:ca:
                    0a:5b:71:bf:fb:3d:ed:1d:58:01:b4:d4:3d:41:f1:
                    71:dc:7b:09:77:cd:5f:54:af:dd:3e:73:12:f1:b9:
                    0c:07:e6:0e:12:5b:89:6c:44:43:8a:83:0b:5c:b1:
                    a1:2c:75:80:2b:83:94:20:8b:2a:43:88:61:e7:71:
                    a8:9c:ee:17:f9:53:fe:e3:d7:dd:70:fd:9a:20:49:
                    ae:cb:47:af:8a:9a:d2:80:9f:f9:ee:e2:57:ef:19:
                    29:d9:37:76:f2:5f:04:8f:ad:06:f3:e7:90:ab:4b:
                    28:3f:f7:95:8b:5d:6e:1b:7e:8d:9d:80:aa:12:15:
                    5f:d1:3c:74:ea:13:f1:21:0b:27:b6:77:54:c3:54:
                    5c:d9:51:8b:b9:3e:9b:c5:98:a0:b3:aa:6f:50:97:
                    70:3e:ff:e8:8e:85:5f:ae:8e:f7:d6:e0:da:51:c3:
                    a6:6a:3f:cd:bd:5b:3d:ca:a6:fc:45:26:69:ed:a4:
                    6a:a7:1b:62:3b:63:28:57:0c:65:f7:8c:a4:9b:5b:
                    b7:62:f2:e5:ac:77:9c:d4:8e:a4:53:d0:8f:c7:23:
                    95:37:a8:93:0f:25:3c:26:78:3a:0b:e3:d5:a8:81:
                    ea:53:5b:4b:e9:89:7f:6f:63:5a:dd:ae:45:e7:5c:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:D6:9D:D3:EE:EC:8C:3D:90:5C:1D:D7:E9:C5:1D:08:61:B3:56
            X509v3 Authority Key Identifier:
                keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:cb:5a:28:99:b6:59:54:4d:f8:f8:7f:5e:c3:5f:36:36:
         12:12:53:01:17:37:ff:16:6b:a5:27:25:99:d9:43:08:44:50:
         6a:24:00:b5:21:15:98:57:ad:18:38:26:02:c8:30:0a:99:46:
         6d:12:d1:b8:cf:93:cb:d0:bb:0b:28:41:65:97:1e:2b:71:a9:
         0c:7a:62:6a:5e:f3:c9:74:f0:3a:c5:01:6b:11:07:70:4d:4b:
         0a:b5:b0:bd:93:02:10:99:a2:4c:bb:77:9b:d1:be:c8:a9:f0:
         b7:79:63:35:eb:1b:dc:97:d9:63:66:0b:24:a2:aa:5b:d8:18:
         22:de:9c:c9:60:2f:b2:2f:45:57:49:72:20:14:96:53:3d:a7:
         df:12:ab:0d:79:a9:40:e0:d1:db:ee:1e:cd:bc:a3:df:31:ac:
         5e:50:1d:50:84:03:10:ba:e3:71:e0:c9:c2:1d:d4:cb:04:d2:
         aa:0b:55:06:8d:b9:ee:6c:65:89:0b:6e:b0:d6:39:10:7a:fd:
         0e:35:63:c9:cf:e0:1b:f8:5e:c0:5a:35:9d:28:96:94:49:51:
         fe:b5:23:7d:5e:bf:e0:e2:47:ca:a2:37:9e:b4:9e:4d:d3:e1:
         0f:9d:3e:d6:84:d1:b1:a5:1c:8a:7e:3e:c9:cd:90:f2:21:7a:
         de:b9:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----