Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File:                     xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier:          7dTZkArYBV8hEt9ZxZI+7vaWEBQJhI8N51/tSVOpW1g=
Subject key identifier:   38:60:53:A8:6A:67:7F:0C:0D:62:11:ED:D5:18:9C:1A:14:97:43:33
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer:       /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial:       01962E9984F465B66175BB43066D6B41556A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number:          AF
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
                          2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: q21uzFnaAH9PT6vtS9UFpg2lUEW+b+d7SA0W1Atxr1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:84:f4:65:b6:61:75:bb:43:06:6d:6b:41:55:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=386053a86a677f0c0d6211edd5189c1a14974333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:84:37:b0:44:70:96:b3:42:df:e5:1c:d8:
                    5d:94:e0:1a:f8:f7:4f:2c:37:a2:a9:ef:83:db:a4:
                    c0:87:2a:fe:3b:c2:bd:0c:24:b1:f9:b9:04:71:6f:
                    59:ca:38:ec:b7:0c:1e:a2:44:7b:f6:78:df:9c:0f:
                    10:ee:55:86:df:f8:e8:38:92:db:cc:57:6c:24:83:
                    5d:cc:5e:81:ca:a4:36:98:06:0d:96:18:3a:c6:14:
                    39:64:70:b2:5d:d7:fd:44:2d:f9:20:bd:6d:2a:f8:
                    51:ea:af:dc:c8:bb:18:0c:52:b2:88:27:9f:84:85:
                    b5:10:aa:5f:55:95:17:d8:ba:1d:4b:a2:ac:73:29:
                    20:60:91:8f:e1:a1:72:5b:b8:2f:40:c2:86:05:9a:
                    73:4b:37:ce:3c:0d:74:2b:fc:7b:30:c3:86:af:07:
                    d9:b7:30:45:21:93:74:df:b7:6a:ff:3d:76:0d:1f:
                    73:7b:5a:4a:15:a7:b6:4c:7a:8f:5e:2a:13:01:d7:
                    cd:f4:f9:3b:34:f6:2c:f2:d7:7c:a4:4a:5f:93:66:
                    89:b8:82:9c:d8:fb:80:17:c6:1f:71:d9:a9:1c:15:
                    d6:8d:41:e9:d7:75:6b:93:d5:ee:1d:03:dc:c2:47:
                    81:cb:cc:b3:87:70:37:90:10:cc:29:58:ea:4f:72:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:53:A8:6A:67:7F:0C:0D:62:11:ED:D5:18:9C:1A:14:97:43:33
            X509v3 Authority Key Identifier:
                keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:ab:2e:3e:c4:7c:80:21:3c:6f:f7:65:b0:cf:56:d2:d6:
         31:ea:51:66:a0:ee:05:45:ec:1b:c0:02:82:fc:af:bd:41:bf:
         ef:f7:52:4c:00:d7:13:f5:5d:0b:0c:f7:07:93:4c:d6:29:20:
         8a:9f:22:65:b0:40:e2:99:2d:a9:ab:d4:4d:12:29:ef:a0:ec:
         12:dd:9f:28:ac:a4:ab:18:87:d2:31:59:d2:8f:c1:4a:66:e5:
         5c:08:84:55:fe:8a:3c:18:3c:30:f0:2c:b4:77:00:7b:65:0a:
         36:49:a2:d6:2e:27:1b:12:21:c9:a6:67:1a:b4:22:ed:72:49:
         c2:13:f2:d4:85:d4:ee:6a:ff:66:ef:32:ed:4b:34:9b:8e:8a:
         af:9a:ec:28:bc:9c:d6:73:14:8c:d7:2a:2d:76:70:57:42:e2:
         a8:4a:4f:5c:e0:e2:4d:67:21:f6:a9:90:0c:f1:6d:30:81:36:
         74:bf:ba:ff:ea:a4:3d:c8:1a:53:3c:4e:12:f0:e5:36:86:4b:
         ca:52:fe:2a:44:95:3b:c3:07:e6:d9:e4:a2:91:4b:2b:78:85:
         35:68:e7:b4:cd:dd:53:51:e2:c9:89:7f:d4:e6:53:3b:94:7a:
         5a:4e:3a:d7:d2:39:52:5e:2e:77:cb:58:cd:26:74:de:95:7f:
         0d:36:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----