Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File:                     FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier:          Uh8JI0fMglxJzwRfYJP4ACQGQkIkMOCC9pWZsrTbOHk=
Subject key identifier:   4B:18:CC:C1:BF:DB:BA:DD:29:94:52:89:FF:2A:20:77:A5:9C:5F:45
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer:       /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial:       01962E9883CB0521F655CE3F558E48048CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: 1LYACc1kMMVu1JLEsCdrcr7c1tSTpsZmXX/R7ZqxpTM=)
                          2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:83:cb:05:21:f6:55:ce:3f:55:8e:48:04:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=4b18ccc1bfdbbadd29945289ff2a2077a59c5f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:ef:ee:da:05:0b:b2:52:8a:55:fa:a6:fe:
                    20:dc:79:ea:bd:0e:41:bc:61:22:70:68:a0:4c:63:
                    50:39:bc:8b:28:ee:bb:d2:9b:b9:da:5b:aa:6c:3c:
                    db:cb:ae:8a:13:d9:cc:ca:a8:1c:fe:91:0d:3c:b6:
                    ca:6c:59:55:50:23:17:ab:d5:93:0d:ec:d6:e8:21:
                    de:3f:c2:27:6a:80:90:3e:51:e6:eb:57:26:60:b2:
                    9c:83:0b:1a:24:f3:0b:b6:82:7d:4d:a7:55:73:38:
                    78:e3:df:2f:cf:e5:25:d8:89:d6:fc:d1:a7:be:c2:
                    e5:b4:90:45:c7:b9:61:58:45:6a:bf:97:6a:f7:09:
                    11:11:cb:d2:c8:5a:cc:55:0b:bf:91:1c:df:f0:10:
                    08:22:73:8b:10:bc:c5:ff:ed:6f:79:e7:b9:93:fd:
                    c6:4f:6c:8b:84:a9:c0:95:53:74:ad:8e:e1:64:4a:
                    ba:69:19:b0:f0:6a:6a:6b:be:1e:56:ea:fc:2c:a8:
                    28:20:8e:f2:32:c9:d8:95:6a:40:55:b2:68:22:a8:
                    83:13:57:87:32:fa:3d:8a:df:58:8f:af:7c:fa:2b:
                    85:1c:e3:52:72:14:9c:2a:cc:3d:a6:2f:93:95:44:
                    82:44:d0:c9:b0:54:54:db:c3:e2:15:6e:ab:96:99:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:CC:C1:BF:DB:BA:DD:29:94:52:89:FF:2A:20:77:A5:9C:5F:45
            X509v3 Authority Key Identifier:
                keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:9b:dd:4c:c2:57:05:69:0b:10:ba:80:11:1a:f8:34:04:
         b0:5b:76:ab:4f:27:94:fd:2f:80:34:55:e0:b6:d1:4b:aa:65:
         96:45:9d:62:11:7f:5c:d1:f8:2b:86:26:7c:43:3e:bb:d9:19:
         7d:27:07:39:a8:9b:13:09:51:62:60:26:0a:2e:18:03:bd:65:
         a6:bf:87:10:47:d2:64:e0:76:c1:7a:19:77:ab:5c:c0:67:f0:
         21:8a:9c:ff:f7:83:91:d6:d7:83:b5:98:56:9f:5d:37:c7:47:
         7c:e8:93:cd:fc:20:dd:05:e4:80:eb:66:e9:96:83:7f:c3:63:
         3b:0a:6d:a8:ac:9e:0e:bc:1f:f5:c4:ba:71:96:7d:22:bb:e4:
         f7:98:40:a9:52:ac:4e:2d:13:aa:6e:ba:99:90:40:c1:4e:5d:
         87:7c:24:33:59:95:82:73:fa:52:54:e0:3a:a1:72:7f:9a:ee:
         4b:97:fc:20:7b:29:87:41:9a:ed:ed:e9:71:06:18:4f:fd:56:
         a8:0c:bd:ff:b8:4e:77:1f:26:28:b4:62:af:87:77:8b:f5:16:
         5a:da:65:b2:dc:e4:b2:6f:9a:55:cd:b7:d7:30:a4:0d:a2:9e:
         2c:79:20:8a:c2:f5:86:e5:1b:75:75:44:95:90:a6:32:b5:a8:
         c6:63:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----