Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File:                     1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier:          ZUydJqnnDM078kSuWLBP4G2qr9xM7SxCEt5g4nUuDpo=
Subject key identifier:   AD:2F:D1:EA:71:4E:36:13:9A:40:F6:6C:78:C0:BC:35:49:11:81:D7
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer:       /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial:       01962F06D58A4FD1CCFF214E42175ECB0FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: lJqnAg3DgN5PYao1MkAF2wzuMUhscdLsCewUpmPJWzA=)
                          2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d5:8a:4f:d1:cc:ff:21:4e:42:17:5e:cb:0f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=ad2fd1ea714e36139a40f66c78c0bc35491181d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:4f:1f:1f:a1:1a:59:73:51:0c:8c:e0:c7:
                    dd:8a:4f:b7:62:8a:db:c7:29:be:42:d4:9e:59:b6:
                    af:e5:5e:9c:4d:f1:12:f3:1a:22:bc:39:63:1b:56:
                    08:ca:fc:3f:f7:ae:31:2d:aa:cd:f9:81:fc:de:79:
                    d6:45:bf:a9:8d:09:12:eb:e2:bb:00:13:3e:09:e0:
                    cb:69:b6:e6:58:79:5d:7d:40:9f:1a:1e:43:da:2e:
                    f7:d3:c6:e1:04:28:56:52:28:7e:25:72:eb:54:f4:
                    ea:1f:15:57:5b:ce:f5:d1:c0:be:aa:76:22:a6:52:
                    44:56:78:2d:7d:73:5a:8f:0b:74:bb:8c:df:c3:f3:
                    35:5c:88:52:3e:1f:ce:02:a7:a6:49:1a:a4:2a:1b:
                    13:8f:c7:fd:6f:83:69:f2:89:60:93:70:47:19:3d:
                    0b:32:8d:1a:60:ad:6a:bf:08:88:71:cd:bf:f2:89:
                    88:bd:3e:2a:f7:fa:20:10:1c:10:33:2e:93:64:47:
                    e0:72:75:ac:f7:8e:8b:72:3e:94:5f:2e:ad:74:71:
                    a6:9c:72:c5:e1:9a:bc:51:bf:bd:e6:ce:9d:13:d8:
                    9d:04:07:76:d4:28:35:2a:3e:f1:f3:46:15:f5:a2:
                    51:9b:b4:f1:7b:32:96:76:ee:e2:04:6d:1c:75:fe:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:D1:EA:71:4E:36:13:9A:40:F6:6C:78:C0:BC:35:49:11:81:D7
            X509v3 Authority Key Identifier:
                keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:42:76:09:db:ef:7a:c1:51:4d:9f:cd:f8:4b:24:fd:69:ae:
         d1:ff:eb:0f:38:6f:4b:3c:99:d2:2c:aa:97:ac:6c:b4:ef:52:
         c8:92:d2:fd:80:3c:46:39:0a:62:c2:aa:46:44:b6:a0:d0:01:
         a2:92:90:90:be:dc:fc:6c:27:80:79:33:1d:51:b6:fa:32:fa:
         54:f8:17:86:bd:4d:61:5f:9f:ad:cc:d3:82:6e:ab:69:91:e5:
         21:9c:6c:57:14:fc:4f:93:3e:1f:43:6b:c8:bd:ea:88:6f:46:
         e1:8b:bf:8e:da:f3:73:68:8d:5f:6e:b5:b3:e5:ef:5c:38:da:
         ad:0f:2c:2d:44:f4:9c:17:ac:de:77:02:97:05:75:e0:b2:4c:
         7f:c8:c7:2d:cd:17:47:5b:f6:71:5c:1d:da:76:69:da:0d:16:
         57:93:e1:89:b8:2b:07:71:41:bc:5f:5f:48:1b:23:42:4b:26:
         0e:a1:93:a2:95:9c:80:69:b1:6b:fd:f8:7a:58:e2:75:52:41:
         00:dd:c8:76:3f:e2:77:fd:90:7d:50:59:af:0f:7b:9d:04:7e:
         fb:48:1e:50:3a:11:03:14:8b:07:4e:e9:5a:2b:39:20:f7:20:
         3b:48:8c:f2:09:8c:35:82:f4:ba:f0:54:ce:82:7f:fb:82:3c:
         c2:cb:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----