Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File:                     h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier:          8PgKlbGZqDu83qGf+AHzilTNI5Ja39Qf4StUB4YrRwA=
Subject key identifier:   A6:0A:94:21:FB:C1:74:40:4B:0D:72:30:96:10:75:F1:BB:B3:67:8B
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer:       /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial:       01962E2B2F6D746F58559714549041C11817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
                          2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: XvvlTPQkrqPBV1ow2fjYZnqnAl2qsiiNYeTgYJjdoaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2f:6d:74:6f:58:55:97:14:54:90:41:c1:18:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=a60a9421fbc174404b0d7230961075f1bbb3678b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:11:8e:12:06:0d:8a:c5:4d:9e:b8:09:48:
                    1f:8b:05:42:51:11:40:cd:e3:15:2d:6c:56:ed:a4:
                    95:64:67:b5:43:e4:cc:10:42:34:2b:35:19:b2:eb:
                    6d:98:f4:9c:f0:94:68:1b:9e:04:ce:06:30:42:08:
                    6d:48:70:8e:f0:64:1a:63:37:e2:c5:24:c6:6e:9c:
                    38:52:9f:4a:3f:7f:e9:75:8c:1f:ff:92:c9:4c:f2:
                    f8:e4:96:f6:fc:d3:b3:25:59:cd:ab:54:89:00:2c:
                    fd:b9:d0:ca:4c:65:26:29:10:00:5f:eb:c4:08:d4:
                    cd:54:0d:e0:1b:d9:47:ea:3e:26:3d:d1:76:08:a1:
                    24:43:d3:25:2e:76:c3:2f:5d:43:ec:1a:28:41:85:
                    54:d0:22:a2:06:d8:5a:88:ee:b6:a3:d6:db:af:32:
                    b4:7c:27:eb:88:6a:7f:8a:e5:d8:31:f7:d6:25:8f:
                    3d:fd:f0:33:c5:fa:b4:52:d1:79:12:44:c3:82:7a:
                    5e:c4:69:96:3e:aa:85:a2:03:75:6e:ad:2d:3c:a6:
                    87:42:9e:b2:88:8b:54:e8:af:86:0f:f1:14:d8:af:
                    cc:47:de:37:6e:63:a0:ff:58:dd:e8:e2:0f:56:55:
                    37:6e:6f:c2:c3:42:0b:d1:5f:af:5a:97:09:3e:9a:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:94:21:FB:C1:74:40:4B:0D:72:30:96:10:75:F1:BB:B3:67:8B
            X509v3 Authority Key Identifier:
                keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:27:78:43:9d:2b:a9:59:f6:ee:cd:f9:3f:12:c1:fe:b3:73:
         ac:d5:60:7e:95:ac:02:03:bf:6c:6d:9c:d0:42:e2:e8:36:24:
         9d:5b:eb:2c:8a:8b:04:c2:50:06:da:b4:d1:d7:ff:7f:ec:b9:
         5e:13:ba:0f:8f:e9:df:74:64:c1:9f:5c:21:98:42:19:0f:bd:
         d8:c0:2c:ec:b9:91:46:d8:fe:ff:72:96:07:95:13:ce:9e:7c:
         4c:4f:94:b4:99:72:dd:4d:33:5d:8f:d2:7f:64:d1:74:d8:6c:
         a0:80:2d:3a:c0:d8:9f:57:d5:6b:9e:27:b9:42:f8:b4:7b:35:
         b5:79:cf:f8:f9:3d:72:cd:cc:03:7f:f1:95:c3:79:80:74:0d:
         26:1d:72:5e:44:20:2c:a8:02:b3:20:90:f8:85:17:9f:6e:d8:
         ba:41:51:7e:22:a8:9a:73:f9:b5:7a:80:ff:bc:81:94:17:7f:
         59:83:28:7f:37:11:9a:8f:17:76:87:ad:cb:07:3c:ac:5c:a7:
         7e:50:1e:28:9f:4e:7d:af:69:50:19:14:8f:fc:ce:1c:ec:b7:
         d6:14:ef:03:5d:9c:e3:f8:48:59:0c:be:ab:a7:d0:5e:47:39:
         af:9c:f9:82:e4:cb:46:d9:58:c6:44:44:35:40:be:5f:1c:e6:
         32:38:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----