Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File:                     isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier:          3th/4myvx+PXHKM/CeW6OTrjV+qTZJJLiCpkYkXmK5U=
Subject key identifier:   BC:4C:43:60:98:1C:08:B2:E8:D3:EC:49:47:8B:76:70:D3:0E:B7:29
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer:       /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial:       01962FAB9DFBCE1CB77FC3976C6C65E43A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: hd7MTJwJjBfSvwq4twdG+ZOAIPYIUO/nv1soce2I4CA=)
                          2: vASHsaghbXrziZGVrZp3z_dQ0hY.roa (hash: +D8Rri+Xk/SVSUJL6LzaxDMlSw5qtTcPP6AjI3TjSIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:fb:ce:1c:b7:7f:c3:97:6c:6c:65:e4:3a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=bc4c4360981c08b2e8d3ec49478b7670d30eb729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:31:3e:36:f0:d1:f0:1f:02:f6:9e:2d:d3:
                    0a:f9:ca:73:29:73:d4:cb:5c:3b:cb:85:95:5c:8c:
                    0a:73:27:ae:28:4d:b9:65:c8:a5:25:66:3a:1b:d1:
                    91:35:da:6c:18:a9:05:ef:3b:52:f7:e9:42:80:40:
                    c9:c7:a2:86:c4:12:79:38:c8:76:2f:6a:98:65:62:
                    b2:4b:01:a2:b9:d7:3c:f5:fd:25:f9:f5:16:b2:80:
                    fc:6e:02:f7:11:69:3f:77:20:66:1c:eb:df:75:c3:
                    61:1e:24:ee:46:da:22:5d:9e:52:99:c3:db:97:b8:
                    62:db:3f:d5:25:df:71:04:2b:1a:bf:cd:5a:cb:94:
                    b5:c4:82:81:3a:89:30:48:81:70:38:63:f1:2a:c4:
                    2c:d3:11:6f:9e:20:ab:f6:3d:de:ae:6f:c4:09:10:
                    b9:fb:b4:80:84:40:5d:dc:44:91:80:a4:97:65:9f:
                    f2:cb:af:d6:67:f4:40:66:55:70:af:5e:ae:8b:79:
                    fc:b7:d2:af:be:c3:5a:39:ae:44:30:7c:5a:38:0b:
                    c7:51:6b:a0:e7:79:cd:44:50:54:7e:0e:28:a7:c6:
                    97:0c:51:c1:57:5c:f6:d9:54:a4:f0:90:47:5e:28:
                    d6:52:70:4d:c5:00:5a:c6:43:87:70:6d:02:85:6c:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:43:60:98:1C:08:B2:E8:D3:EC:49:47:8B:76:70:D3:0E:B7:29
            X509v3 Authority Key Identifier:
                keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:1d:31:2f:10:43:18:3b:08:3d:07:16:e2:63:28:5f:46:
         04:44:d9:ba:56:aa:cf:35:60:0c:f0:09:c6:27:d0:b5:03:d4:
         6b:c9:b4:a8:e0:6d:aa:67:e7:61:23:45:11:6f:86:b5:00:15:
         74:9f:b2:5a:b7:f5:4f:3f:12:e6:91:ad:12:a5:89:08:3e:86:
         70:7e:de:d7:7f:55:c2:da:cb:57:88:3a:a8:b8:4b:87:c8:ee:
         bf:b3:f1:d6:05:1f:b3:6a:0a:43:b8:d2:a1:c9:9a:19:da:fa:
         5b:0a:d1:d0:c9:8f:64:be:45:50:aa:58:c7:bb:95:3b:56:38:
         8b:b3:e2:7f:e9:2f:88:67:81:6c:44:80:17:68:5a:f2:88:06:
         2f:d5:fe:11:be:2f:c7:79:9e:46:e1:74:e3:82:ef:8e:5c:b6:
         78:df:bd:a1:ab:00:9c:ec:9c:fe:cd:37:eb:3b:17:63:4f:ce:
         f1:97:c2:b5:47:a9:dc:e4:1c:4c:85:c0:66:90:c6:fc:b6:8d:
         d8:b9:2c:69:c1:e8:6d:7c:f4:74:f8:cb:38:8d:0a:37:c4:af:
         5c:98:f6:85:64:22:99:63:83:4f:8b:ea:82:3c:da:f2:b1:19:
         22:ba:98:63:52:1c:c6:a1:94:9f:ae:ef:5f:c8:a6:ae:ed:9a:
         b9:64:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----