Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File:                     FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier:          VKVdzUkShR8dG9kgDwExVUZocuyQaxxdnN3pSD6RXR0=
Subject key identifier:   E3:94:AF:88:A2:7D:35:F0:96:2A:06:10:44:59:BB:C0:B2:2B:18:7F
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       01962E2AC43A933C09F2AEDC00DD335E279C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: R+7bpRpYLHgDwWgJZwGTfR1fL/u/Ff711lwrelweYns=)
                          2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
                          3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:3a:93:3c:09:f2:ae:dc:00:dd:33:5e:27:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=e394af88a27d35f0962a06104459bbc0b22b187f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:b0:62:d1:76:53:6f:da:68:d5:7f:ec:e5:
                    c4:ed:4b:62:69:8c:1e:f6:41:1e:84:b3:f8:a8:11:
                    ee:91:70:e8:43:ef:36:5a:05:d0:57:f4:a1:48:56:
                    59:ad:ea:b2:20:91:c3:29:82:10:3d:80:30:c5:44:
                    09:e0:2c:16:65:1b:b1:5a:ad:6a:76:e8:06:db:d9:
                    41:30:a5:13:76:44:4f:63:8a:13:88:91:be:6c:35:
                    19:82:d6:c0:f2:d8:61:14:25:eb:d4:ce:2a:36:2d:
                    17:ea:d0:41:16:9c:13:b6:b5:a3:b2:73:59:0b:f5:
                    ec:87:3b:02:4c:17:fb:97:cf:52:6c:76:f6:9c:de:
                    56:76:57:6a:3b:ba:62:3a:31:41:e2:b6:f5:f6:9e:
                    39:70:b1:27:a2:30:0e:bc:5e:9f:6f:2b:85:c7:bc:
                    6e:0e:45:94:40:cd:4d:73:8b:c9:31:da:56:bf:5f:
                    9b:95:86:26:11:52:93:3d:c3:17:46:d4:18:0c:58:
                    98:40:51:13:2d:d9:b6:2d:d6:22:e3:85:ba:c5:b7:
                    b5:32:54:19:49:15:72:e5:99:71:1b:12:40:c1:80:
                    9a:1e:12:80:09:1f:43:31:45:e5:7f:51:e3:4d:de:
                    69:8f:a2:68:32:11:a0:7e:05:f4:18:32:1c:4d:a3:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:94:AF:88:A2:7D:35:F0:96:2A:06:10:44:59:BB:C0:B2:2B:18:7F
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:5b:27:cf:8f:58:9f:26:ba:c7:c3:4d:84:8d:71:ea:7f:
         54:97:2a:8e:48:13:1a:69:82:e9:0f:da:f5:b9:06:fd:62:ff:
         30:0d:fc:9e:c9:98:83:42:bf:06:45:91:c9:1e:22:66:3b:94:
         b7:b6:b7:ca:27:0e:7b:28:93:27:f9:84:fd:8a:e9:df:18:d8:
         09:67:40:bc:fd:84:37:9b:fa:71:2c:9f:48:57:b4:ca:ab:69:
         96:21:52:75:d5:ba:40:df:7c:bb:21:87:8e:50:6b:93:5d:fb:
         90:1e:7b:4e:d8:72:3a:33:cb:a6:34:6c:f5:25:f5:4d:f8:29:
         ed:4f:bd:b6:34:d5:05:98:47:35:5f:36:e7:e8:3a:da:42:84:
         3b:f7:fd:e4:94:4f:81:b3:3b:79:63:c8:d8:34:56:e6:53:92:
         78:e9:98:d1:02:52:d3:11:44:0e:e6:89:88:a3:11:6b:be:39:
         3c:af:60:01:d6:33:b1:56:93:0c:ad:2e:30:55:b7:1a:2d:bd:
         25:48:66:5d:3a:c8:ea:b5:a6:ac:fb:fd:0f:94:ff:80:26:cc:
         75:a8:a6:be:1c:a9:3f:ff:5a:2b:09:d5:47:e0:d2:93:2f:68:
         6d:1d:57:a9:34:fc:28:11:43:77:eb:a6:ec:d3:79:c8:6c:25:
         e1:09:7a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----