Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File:                     4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier:          VrjzN0JxBatULIFG/d2qjZ1cB8z76ZTPZw41+uSAbfs=
Subject key identifier:   77:6F:63:35:A1:F7:1E:A4:DE:2E:F8:98:63:B8:F4:D1:07:D7:D8:64
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer:       /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial:       01962E2AEC7C47B8CAE3F505350A9BBFB99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: Y5pPi67WIsUXCdJzQvEgXMwuUaZ/t1/IkLxKRlXys7w=)
                          2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
                          3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ec:7c:47:b8:ca:e3:f5:05:35:0a:9b:bf:b9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=776f6335a1f71ea4de2ef89863b8f4d107d7d864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:ad:67:8b:2c:2b:96:d7:e7:44:71:4e:3b:
                    45:53:77:07:5d:50:3e:e1:6b:8c:ee:c3:0b:14:87:
                    09:01:e4:91:ce:59:16:2d:42:6e:42:bf:75:c7:96:
                    0a:b1:23:35:12:1f:86:fe:9c:39:2b:96:5b:1d:14:
                    5f:f6:83:0f:cc:1c:90:af:03:54:ef:fd:c9:15:3c:
                    52:28:ad:17:25:da:80:be:09:8d:9d:a0:f8:cd:5a:
                    4b:4f:23:a9:d2:ca:2f:09:c6:48:43:4f:96:49:ea:
                    8d:2b:7b:bb:41:ff:7d:cf:e8:d5:22:a9:9b:51:56:
                    de:52:f1:dc:07:d1:ac:4a:24:de:3a:71:c8:6f:12:
                    7f:88:e6:9b:a4:df:ec:71:d7:60:d6:0b:35:61:6f:
                    fd:10:85:7e:0d:92:3e:a4:e2:19:72:95:a1:7c:30:
                    da:e7:2a:83:a0:3e:85:9f:00:be:0e:b2:9e:9a:3f:
                    49:8f:b3:37:a8:3f:23:0d:fa:5f:98:49:43:9e:d1:
                    a5:45:5b:13:3e:27:9c:cf:7e:2e:47:e0:c8:cb:7b:
                    08:a9:79:b7:0c:5d:ee:66:56:a2:f5:27:72:07:cc:
                    82:20:40:65:4c:57:e3:f5:a6:7c:6d:a4:ec:ae:fc:
                    f6:f1:aa:25:58:df:6d:8d:01:6d:95:cd:90:bf:37:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:63:35:A1:F7:1E:A4:DE:2E:F8:98:63:B8:F4:D1:07:D7:D8:64
            X509v3 Authority Key Identifier:
                keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:98:de:ac:4a:18:e0:8e:44:c6:fe:d7:13:61:27:ef:ad:13:
         cb:c8:41:72:77:70:a4:ab:12:f5:a0:73:66:72:39:2e:80:90:
         05:45:1e:a1:87:89:15:79:57:9d:66:a2:d6:19:e6:8b:7e:12:
         47:30:70:ad:2f:4a:ab:37:ae:4c:d2:58:1b:1f:1a:d5:26:89:
         80:a0:62:a8:68:8e:78:4a:97:7a:83:a9:c1:a8:8a:8e:2f:1c:
         c8:12:13:d8:f1:cd:70:4f:4f:fe:32:bc:26:bb:31:4f:ab:31:
         7d:74:88:9d:15:6d:f7:12:cc:8a:41:91:72:fc:eb:d4:11:cb:
         ff:05:61:5c:6f:4b:cd:fe:6d:4b:28:8d:51:bd:b0:35:8f:bb:
         00:ac:e9:5d:08:1e:7f:ce:ea:92:8d:19:18:6f:e6:d9:f8:28:
         ce:f4:93:c5:80:51:f0:01:bf:0f:21:15:fe:eb:26:b9:08:f2:
         8b:14:25:93:98:52:c5:72:d2:75:b3:8e:bc:f4:04:7c:d2:91:
         a0:b0:be:6e:b7:c2:02:fd:9b:c0:73:f2:a6:fd:33:88:33:47:
         17:8d:7f:ea:ba:e2:98:fb:3e:21:c7:6f:59:22:05:45:33:ba:
         ea:ca:66:9c:16:5f:db:db:04:2f:ed:ae:8b:8f:60:05:1e:f8:
         66:b9:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----