Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File:                     CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier:          UvXRqzTaoRuP2xKuxmftOaPG3VoJ4GDsrz6Sn91g488=
Subject key identifier:   88:E3:5E:E7:02:F0:0D:A3:27:0F:AF:81:C2:8F:09:06:7C:08:2E:58
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer:       /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial:       01962ECF9EF6D33F8F1BB677C8A9E0B6605F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number:          0BBC
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: 1zvNk7KPZIEGuCjDey5ozQPmlGvcuBjqo8PLvwPyx8c=)
                          2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:f6:d3:3f:8f:1b:b6:77:c8:a9:e0:b6:60:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=88e35ee702f00da3270faf81c28f09067c082e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:c6:c4:5d:9d:01:f4:18:62:67:dc:68:50:
                    7d:11:e3:11:98:f9:74:1f:03:ff:ff:75:ca:a0:fd:
                    b4:4d:fe:3e:c9:b0:08:bd:e2:6b:61:9a:33:5d:25:
                    9c:29:83:2e:4a:d1:46:c2:1e:9f:84:e7:b3:30:5c:
                    1d:38:2e:6a:07:8e:1e:f1:68:0d:19:ac:ee:83:07:
                    a5:24:fb:8b:8a:ed:18:a4:21:3a:14:ca:43:d0:8f:
                    9d:68:91:73:38:2a:96:1a:4b:07:1f:b1:2b:7c:3a:
                    36:58:ff:ea:56:42:5e:28:c4:94:ca:ca:b0:b1:d6:
                    17:32:9c:e5:da:82:90:57:c5:6d:54:a3:5a:ce:7a:
                    91:ea:8d:b2:c8:3b:10:db:e8:94:b1:a3:b9:b5:51:
                    2d:30:77:3e:42:3a:57:df:7f:09:ae:ce:c8:de:77:
                    3e:43:1b:83:65:ac:a6:37:0d:4a:7e:ac:b6:83:e0:
                    3e:ef:12:29:d7:6d:b3:22:cb:f3:3b:01:eb:40:64:
                    b0:71:61:79:e6:f4:b7:47:3f:ff:93:b4:34:08:a6:
                    df:57:c4:bd:26:30:c9:ed:18:42:21:a2:80:00:ec:
                    07:95:43:fa:2e:f7:96:4d:99:54:43:d1:ba:b8:f0:
                    ac:34:74:1a:94:0e:82:ac:24:e4:ee:6a:06:2b:96:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E3:5E:E7:02:F0:0D:A3:27:0F:AF:81:C2:8F:09:06:7C:08:2E:58
            X509v3 Authority Key Identifier:
                keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:eb:13:34:1f:b2:1e:a9:a0:18:cb:34:b5:26:5e:52:52:
         2a:56:21:0f:48:6a:a2:80:05:08:f5:f0:c2:04:cc:83:aa:09:
         eb:34:94:77:be:e9:fc:ac:26:6c:70:ef:29:4a:47:9b:72:c0:
         9e:41:7f:5d:f9:0c:76:db:44:d7:3f:cd:ef:d7:57:f6:93:91:
         c8:64:00:42:03:c8:1c:98:a9:79:de:a8:51:35:b9:dc:11:ca:
         09:44:93:e4:3f:f8:99:55:cb:51:6b:da:87:1c:71:21:4f:52:
         12:60:b5:22:a1:92:2d:d9:e3:a4:1f:16:f0:78:68:05:cc:fa:
         bf:37:64:20:df:6c:af:09:80:31:e8:48:0b:0a:fa:45:f3:88:
         29:b5:29:b3:8f:4d:91:b6:53:6e:94:3b:a3:8c:cf:f0:2f:ee:
         f4:56:e9:2c:81:8c:0a:90:2a:d0:e2:ac:e7:89:af:a7:aa:b9:
         85:b6:ce:cb:b2:61:20:91:a0:76:27:20:21:bd:1e:35:49:aa:
         e4:93:03:95:6f:49:64:95:b0:8f:51:d2:95:13:ee:7f:14:fa:
         52:4f:35:be:f5:59:0e:b3:da:83:c4:c6:10:ee:0c:26:05:e5:
         98:b4:b4:74:4f:bc:ad:a7:9a:42:40:ee:c3:00:96:f4:6f:8a:
         7e:67:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----