Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File:                     _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier:          xpCJSUQ2PpFPqnj5WX4y45K1LZfLLI38LL5dSbt3XpQ=
Subject key identifier:   37:8D:70:31:FF:DC:1F:65:DD:A5:30:14:CE:D9:67:9B:53:24:73:C4
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer:       /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial:       01962F071F8F9FB1962D204551E6B19F5D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: E16ggGXMDFBa6rM55fVDHrzQE0pCbkF6fS64gy5mRqU=)
                          2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:8f:9f:b1:96:2d:20:45:51:e6:b1:9f:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=378d7031ffdc1f65dda53014ced9679b532473c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:c6:c8:ea:35:e4:a1:a8:79:40:82:b8:c5:
                    7c:e2:a6:b8:02:27:68:cf:59:29:18:2a:10:14:6f:
                    96:36:fb:6e:b9:85:4e:97:94:0e:0d:31:88:5c:69:
                    d7:96:ce:c8:d3:34:61:66:95:cd:42:ac:f4:31:63:
                    3b:9a:b1:fb:1b:5c:9f:b3:2b:82:51:ad:01:1d:7e:
                    be:76:04:70:c7:56:8d:3c:b3:ff:ea:cc:74:47:2f:
                    2b:90:85:35:a6:5a:21:00:be:48:16:77:86:da:23:
                    3b:c1:2f:9c:d6:5b:07:4c:88:85:48:fb:c5:27:72:
                    5b:a2:74:9f:5f:2a:7a:d7:f3:e9:e0:e7:c6:ab:46:
                    51:71:72:e0:d2:1e:71:fe:15:e3:ea:17:3d:05:b1:
                    f1:b5:ec:26:e6:e6:d6:a3:3e:75:a3:7c:83:6c:93:
                    6f:ce:fe:b4:2b:f0:12:d9:e5:4c:b9:20:be:3f:04:
                    34:d4:14:cd:fc:c6:55:b8:c2:5a:c0:4b:94:54:8b:
                    9f:97:45:e8:ab:d1:c7:ed:6c:59:eb:a6:22:86:8c:
                    0b:d6:89:ee:5f:6d:f4:f0:73:fb:9c:9b:49:76:82:
                    86:c0:19:cf:fc:08:27:36:d3:8d:95:97:a8:a4:ab:
                    c2:9b:1f:dc:4c:a3:07:92:9d:8d:5c:f8:59:7a:67:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:70:31:FF:DC:1F:65:DD:A5:30:14:CE:D9:67:9B:53:24:73:C4
            X509v3 Authority Key Identifier:
                keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:af:a1:91:99:cc:40:8d:99:15:0a:4b:10:5a:67:9a:d0:
         ea:72:ba:dd:3f:85:c6:08:71:c0:15:33:6d:e3:12:41:8c:3b:
         00:2e:df:c3:ee:34:59:a0:55:dc:4d:49:e2:22:0e:1f:f4:82:
         20:24:9e:0e:63:2b:c7:14:65:04:bf:2d:a0:99:81:00:f1:93:
         f9:34:b0:06:be:84:54:74:95:d0:10:f7:0b:a1:f5:c3:43:e7:
         36:ce:4e:5b:81:a3:9e:e3:06:a6:b9:c3:bd:6d:b9:28:6d:ed:
         2c:98:27:83:68:48:20:b1:b0:2e:5d:e9:79:90:71:51:aa:7d:
         6f:d9:6c:2f:b1:48:d5:b8:46:a3:ae:00:2d:15:87:44:e7:f4:
         99:23:23:ca:d7:4e:da:0d:02:0c:6a:74:04:8e:95:19:a5:16:
         e6:4a:05:a2:ba:e0:66:d4:f3:2b:9c:7a:4d:2b:46:48:1a:f8:
         55:15:cc:d0:31:07:77:eb:ce:b5:80:09:14:bb:45:de:83:d9:
         bc:50:2d:1f:f0:5a:5f:29:de:ec:79:cd:fb:7b:94:08:19:8b:
         e9:3c:b3:cb:e1:1d:25:00:b0:b6:7e:0b:83:78:7c:df:cc:2a:
         c0:9a:e3:ab:21:52:f9:b4:d4:8b:ef:d5:0c:13:20:82:71:27:
         f0:74:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----