Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File:                     fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier:          9VAQdhnDohvqWCUrRBTOBmy3Vnen7lXO7zaOtiW9IZE=
Subject key identifier:   17:A6:BE:84:E8:DA:1E:AE:55:E9:E5:8F:20:3F:E6:82:99:D7:40:DC
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer:       /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial:       01962F3D72E8DDE9190E49D7BB6ACC89783F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: RGJHdBFVTxh/OpJr8BA5vxzT52hmW1352ZmUFlFyPB8=)
                          2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:72:e8:dd:e9:19:0e:49:d7:bb:6a:cc:89:78:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=17a6be84e8da1eae55e9e58f203fe68299d740dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:c5:83:42:1a:50:a5:a5:fa:96:04:27:d3:
                    3c:38:9f:a0:e7:de:08:fc:4d:4f:3a:28:21:a0:f9:
                    f5:b6:cb:17:91:c3:87:4c:75:56:60:e1:70:0d:68:
                    33:52:e0:45:73:28:95:3c:05:5a:70:f1:92:6f:dc:
                    e4:66:70:a5:9a:d5:02:76:09:49:ea:ec:50:7d:4e:
                    63:7c:c0:dc:68:0e:46:07:86:ae:e1:02:60:54:cb:
                    6d:ce:1d:76:ea:fa:26:ca:1e:94:75:66:0d:c2:0a:
                    89:99:c9:39:34:68:21:b8:46:05:48:6b:f7:aa:dc:
                    9c:f4:b4:6c:44:08:48:06:9b:3d:dc:31:3b:8b:0c:
                    6e:c7:95:41:95:51:e8:6f:1a:b0:57:2f:00:f0:ce:
                    52:48:fb:9d:ff:c2:7a:c1:92:53:a7:c2:6b:1b:ab:
                    7b:fa:b6:60:e9:26:89:7f:66:65:34:20:8b:86:5a:
                    47:8c:6a:89:f6:f4:2a:aa:ec:c2:ed:84:00:46:39:
                    92:4c:c7:f3:cc:66:57:66:58:92:94:5a:b8:30:ff:
                    32:b0:53:62:cf:47:5e:05:ca:2b:64:1d:57:53:ae:
                    96:25:93:c2:ec:c8:65:5c:2c:e2:cb:9b:5c:03:4d:
                    d7:17:6b:37:66:c2:72:e6:49:29:88:3e:79:1d:0c:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A6:BE:84:E8:DA:1E:AE:55:E9:E5:8F:20:3F:E6:82:99:D7:40:DC
            X509v3 Authority Key Identifier:
                keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:10:86:75:04:7a:31:12:ee:45:b7:57:ef:2a:ee:f7:fc:d5:
         9b:d6:33:83:fb:b5:3b:84:1b:58:5b:b8:17:56:51:5c:c4:9c:
         83:07:64:47:20:cd:1a:55:76:cb:64:06:10:26:a9:0a:c2:bc:
         91:dd:61:e7:8e:76:09:aa:db:f3:89:f9:2d:c2:89:03:f1:53:
         68:cd:0a:51:75:ba:9c:49:43:c5:e6:5f:4d:f3:a9:f3:51:53:
         8f:ef:43:7a:43:df:05:89:4e:ea:b4:d0:5f:de:d4:2f:fc:9f:
         00:58:b5:92:16:e3:34:61:47:1a:b6:64:9f:38:7a:b5:aa:e9:
         1c:94:06:62:db:12:12:47:64:ae:3b:96:b9:e1:5b:24:03:4a:
         d7:1d:f1:d6:3d:c0:a3:fd:65:ac:44:2d:58:b1:23:16:6f:45:
         e9:2b:8a:20:3b:b4:77:6c:dc:a6:b4:11:90:10:fa:c5:40:4d:
         e0:a7:bb:25:86:05:2e:f4:82:65:79:d5:a4:b2:6b:d8:4b:1b:
         32:53:1e:77:c3:9e:98:27:1e:73:5d:8d:ca:1c:df:64:8f:64:
         af:3f:b5:0b:c3:7e:00:e8:f8:5a:b8:6d:1f:2a:54:62:bc:9c:
         a8:b2:5b:1d:ea:8f:72:fb:53:e3:15:bb:d3:6a:df:4c:c8:79:
         69:51:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----