Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File:                     82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier:          MYBa97mk28AvZ249a3/TDuBsy0lh5wFxA6lcI5X+RLU=
Subject key identifier:   DA:A9:7B:6E:91:0D:B8:F2:B0:4D:A7:A2:E0:41:02:EE:8A:07:C9:54
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer:       /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial:       01962E61AE8BA3A529A9460BC141B0D22B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number:          0896
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: NyYQCPHWU8tlYmCgzlyGHVEscUHs7E0Qf4pCcq+aDVw=)
                          2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
                          3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:8b:a3:a5:29:a9:46:0b:c1:41:b0:d2:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=daa97b6e910db8f2b04da7a2e04102ee8a07c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:ff:f7:e3:1e:57:2c:11:cb:49:44:f6:da:
                    79:59:62:c6:21:20:ad:93:b2:cd:4e:71:5c:bb:54:
                    13:dc:d4:f1:89:67:b8:b3:e3:66:ec:ce:fa:cf:44:
                    7f:62:bc:e0:f3:c5:bc:b4:17:60:a1:a6:f7:71:ce:
                    c8:99:63:12:67:21:66:d9:05:48:f6:ad:37:ac:81:
                    7b:63:b7:1f:fe:0a:c8:a0:fd:b9:fe:7c:c0:cd:ea:
                    a1:cb:fa:a4:19:76:da:73:94:2d:3f:ff:b3:7c:00:
                    de:54:97:1c:9b:28:3e:e3:03:9d:ad:4b:90:33:cb:
                    41:19:09:b7:f2:33:90:23:68:8e:24:a2:2f:9e:54:
                    8d:f0:9a:f7:18:bd:f3:b5:29:37:09:20:f1:ba:9c:
                    95:b4:6f:20:14:12:db:8a:9d:32:86:d1:e2:dc:47:
                    cc:ed:8e:a7:17:93:07:73:cf:93:91:9d:9b:c4:69:
                    3a:b4:74:94:ec:11:1a:23:99:a9:f1:99:3f:1f:50:
                    11:2e:4d:7b:6c:8a:5c:53:02:4e:6e:2b:34:93:f9:
                    83:b9:d0:02:cb:81:cc:d6:62:f9:e5:07:b6:e1:27:
                    84:2a:ef:e0:a8:cd:3e:ee:e1:8c:d0:56:9f:f4:e0:
                    60:86:7f:4a:ce:a5:68:01:e5:f5:f5:64:76:3d:92:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A9:7B:6E:91:0D:B8:F2:B0:4D:A7:A2:E0:41:02:EE:8A:07:C9:54
            X509v3 Authority Key Identifier:
                keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:ee:b7:d1:36:ad:14:1a:ef:43:93:c8:25:04:93:7a:ea:
         af:84:42:3c:35:5e:80:17:75:46:ef:35:82:39:e4:97:c3:aa:
         25:6c:ec:be:64:b7:15:01:4b:97:27:9c:f2:2d:77:4f:3e:72:
         22:b1:4a:2e:6b:a0:72:b3:d4:49:d9:07:07:65:29:72:df:09:
         49:10:5f:f4:00:15:41:86:2c:e2:b9:e2:f9:13:84:18:d7:dc:
         6f:23:35:c7:5e:f5:70:64:6c:e2:07:ca:4e:84:9d:14:46:98:
         75:b2:33:53:d3:c0:65:96:97:a8:94:76:ca:8e:86:3b:3c:8a:
         c9:8d:4a:dd:9e:00:ae:59:7c:11:ae:1d:c8:6d:0e:0a:cd:16:
         61:3f:a8:08:64:32:b9:63:f5:67:c2:e6:95:c7:00:ab:07:37:
         10:cd:8d:c4:00:35:81:a7:6a:f6:31:8c:bc:db:fe:ee:f0:1f:
         ac:f4:17:18:c1:c2:cb:2a:94:56:0a:22:f9:43:d5:0f:14:1a:
         fa:89:d0:ca:5a:72:ca:17:06:e9:dd:bd:73:48:f2:a4:38:c8:
         7f:24:25:23:ff:1f:30:ca:51:c7:ad:ea:8b:9f:31:c1:2e:cd:
         a5:31:54:e3:34:0f:32:24:9c:14:21:a0:52:0d:7c:f3:3b:ea:
         43:47:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----