Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File:                     cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier:          oueMgbAlmGpaMmWwyobZrCG/JkBUTnCLI6qsbMXcRD8=
Subject key identifier:   B7:63:71:37:39:BE:A9:D3:F9:33:49:76:80:97:0B:FE:24:B4:8D:19
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer:       /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial:       01962FAB6ADFD366A62F679CEFA7DE7E9395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
                          2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: AxjaFFkQrycFF9NeQEvtyH6ahEQ0FO1PLmdRXd12EDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6a:df:d3:66:a6:2f:67:9c:ef:a7:de:7e:93:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=b763713739bea9d3f933497680970bfe24b48d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:63:25:02:ac:1d:eb:28:46:d8:fc:13:c3:
                    87:7a:43:fa:32:e3:ee:0b:47:6e:67:9c:75:01:07:
                    d8:4b:a5:fe:f7:e9:00:7f:db:74:ea:bf:51:9b:23:
                    e4:aa:78:7b:a1:9e:90:1c:c9:21:62:d5:56:4b:80:
                    96:65:2c:e3:c7:70:65:60:ef:cc:01:1e:2c:df:bf:
                    d7:e4:41:16:7f:9a:b7:1e:85:23:3a:6e:16:6a:cf:
                    b2:74:b1:31:a2:6f:9e:80:ca:ff:26:fb:3c:47:5d:
                    02:11:25:11:6e:26:1e:08:4f:ef:ef:10:20:0b:88:
                    dc:39:02:56:52:c1:f6:12:f2:f4:d4:e5:2e:98:0c:
                    3a:af:e0:8e:d4:86:1f:a3:b8:8e:4c:da:4c:55:37:
                    81:1b:cc:43:39:c6:d5:30:65:95:c2:ce:af:ee:55:
                    a6:6a:e3:b0:ef:5e:3d:80:33:6d:1c:05:1c:be:9b:
                    1c:10:d6:7b:e5:f9:0a:e7:0d:67:13:53:d8:d7:57:
                    d2:1a:a7:93:32:7d:a8:0c:0c:8f:8b:a4:e8:08:db:
                    49:3b:95:03:24:f0:9e:71:f4:d0:f5:f1:6c:e5:95:
                    e0:0f:2e:0b:8a:dc:db:e3:d5:ea:d4:c9:78:90:3b:
                    58:49:d7:32:46:18:53:8d:9c:a6:df:cd:62:ab:de:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:71:37:39:BE:A9:D3:F9:33:49:76:80:97:0B:FE:24:B4:8D:19
            X509v3 Authority Key Identifier:
                keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:47:4f:f3:60:b5:bd:50:6a:c3:40:d7:1a:b9:88:a7:61:
         be:c0:d5:d9:16:2d:8a:f4:6c:5f:4d:40:86:2f:4b:ff:73:d2:
         b4:21:86:38:8b:b1:16:4a:6b:ea:0f:0e:02:e3:b6:16:dc:3e:
         8e:03:e6:f5:19:99:88:f2:93:0b:d8:c0:47:6e:d5:10:12:5c:
         d4:cc:40:9b:26:9c:35:dc:5b:4e:0e:a6:27:00:57:52:46:a9:
         04:6d:2c:81:30:47:68:47:0c:fd:54:5d:54:18:69:54:36:49:
         9c:fc:63:68:51:b8:55:91:e4:11:1c:40:7a:4d:e2:93:17:7e:
         34:4d:20:bb:f1:21:1f:49:5d:ea:7f:24:e1:90:ff:b3:a2:62:
         13:e9:96:cb:32:9a:65:1e:f0:77:91:45:29:a6:99:af:74:80:
         f3:6a:87:bd:80:7d:8d:b4:39:c7:32:58:45:23:aa:84:8b:ac:
         ed:af:96:06:39:98:eb:f3:48:e9:95:23:11:c3:ad:58:1c:da:
         70:c5:0a:5e:4c:57:64:fe:84:f9:3e:de:7f:5a:d7:7f:0d:b8:
         e2:11:99:d4:bd:95:dd:6a:ea:74:27:c9:f4:24:e9:80:98:1c:
         9f:ea:74:29:14:84:21:6e:be:29:e2:1c:82:dd:53:3a:dd:33:
         2e:11:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----