Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File:                     phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier:          ZckKh1xAA4uHTtXgvH82MVja0tYaF6H5xaKElLjq9UM=
Subject key identifier:   0B:FE:08:92:B7:36:B1:D9:2A:D9:DE:57:67:FD:7D:48:AB:45:76:7D
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer:       /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial:       01962E9901C0CFBB8251B3626157FB625824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number:          0E
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: RJMViP0qC+4NKG60jCkB5af6i9WLV+0TTdl/zAT/Ufg=)
                          2: rEjgEhZzL4goWIA1kujfN_BwihE.roa (hash: j3AflFklIT5kR+h++zJX2Hgi1qkfo3rJgP91fSsoBso=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:c0:cf:bb:82:51:b3:62:61:57:fb:62:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=0bfe0892b736b1d92ad9de5767fd7d48ab45767d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:14:62:a4:76:70:92:f0:9f:b6:a9:56:6f:
                    1a:66:2e:02:78:9f:3c:09:0c:ef:cc:fa:83:37:df:
                    df:3f:fa:78:a6:e6:b7:56:a4:5a:1a:08:e7:31:ef:
                    43:b9:e4:b5:ce:b1:86:17:80:c1:da:99:a0:af:46:
                    37:a8:2b:0b:3b:6c:6d:4b:a3:3f:4c:0c:0a:d2:af:
                    54:f6:0c:e6:c0:65:77:69:2e:e8:4d:0f:93:2d:be:
                    e8:d6:ed:2b:48:f0:c6:9b:42:db:fc:9f:bc:bb:dc:
                    86:5a:71:8e:51:2b:f8:b1:69:89:6b:ee:92:68:23:
                    91:5b:19:c0:b8:3a:be:95:9d:53:9e:17:c8:7d:40:
                    1b:10:60:69:29:77:89:fb:b4:1e:81:de:76:21:aa:
                    1c:90:2e:05:29:86:f2:27:27:52:d3:14:f7:84:5e:
                    8c:77:5d:dc:e4:fb:c1:7c:b1:92:3b:b6:f0:83:66:
                    3e:8f:be:a6:cb:0f:1b:0c:22:2c:55:37:7a:f4:f3:
                    d1:e4:01:51:64:9a:de:69:4e:eb:e6:e7:28:71:3a:
                    f8:5a:54:f3:95:3b:e8:45:a4:3f:6e:f1:89:e0:6a:
                    f4:f8:c0:1f:f7:b4:1d:dd:30:21:7e:50:cb:b8:ad:
                    6a:ff:44:7b:39:a7:d3:92:c8:cd:c0:46:0c:01:29:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:08:92:B7:36:B1:D9:2A:D9:DE:57:67:FD:7D:48:AB:45:76:7D
            X509v3 Authority Key Identifier:
                keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:4a:ca:f8:75:13:49:83:21:8c:4b:99:76:d3:28:34:38:
         b3:09:b1:b8:f5:c5:e7:a8:a0:fb:66:04:df:89:9d:b3:ab:f4:
         dd:5d:e9:8b:25:2d:7d:96:cd:a9:a0:3d:f3:c0:9f:13:df:28:
         96:39:7f:82:7a:9c:c7:b4:83:83:4c:bd:c6:ac:22:dd:42:f2:
         00:79:fa:08:8b:04:c3:75:7d:86:b4:b2:d0:46:af:ff:77:67:
         00:9d:72:70:33:89:a2:f6:3f:d8:2a:1c:7b:45:82:55:82:ec:
         85:87:fc:7b:43:7b:ef:34:df:1c:db:21:ab:2a:3c:11:7d:f3:
         80:14:20:19:62:8b:6a:be:da:97:a1:ab:aa:db:a0:62:a4:e4:
         14:25:58:87:a8:78:78:bf:39:00:76:1f:ae:9c:1b:5d:54:0b:
         58:f8:a1:d1:89:2f:26:c6:1d:5a:ca:da:c2:d4:65:e5:c4:b8:
         4e:92:7e:9e:71:90:1d:3d:22:43:ba:d4:2d:f7:5e:13:2c:d3:
         13:b8:36:a9:f7:1d:b6:1d:4a:a6:ab:d1:9e:29:6d:3a:13:7f:
         a0:dd:5a:1f:74:09:05:d9:35:48:c7:bb:60:c6:3b:79:90:97:
         23:be:3b:28:a7:68:ec:64:06:3e:05:22:84:54:91:ac:1e:40:
         c5:16:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----