Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
File:                     _m-zjWufNfVcZIPDeGmR__jVJ0I.mft (raw, json)
Hash identifier:          yaRlLU1G1Gqs4Ea2S2XpfwaW8nCwyL4wHlWkS/znoW8=
Subject key identifier:   14:2C:EB:7F:24:03:EE:4D:72:E1:CF:F6:B3:DD:01:66:DC:36:72:82
Authority key identifier: FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
Certificate issuer:       /CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Certificate serial:       01962E98897797AFD39C764046433E4CA766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: _m-zjWufNfVcZIPDeGmR__jVJ0I.crl (hash: OOFd46DlXlrLQm3Jm6/YEM44whq1cCj+7ElV4kIGFzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:77:97:af:d3:9c:76:40:46:43:3e:4c:a7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=142ceb7f2403ee4d72e1cff6b3dd0166dc367282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:91:76:31:3a:4e:a3:30:de:b3:bf:d1:13:8f:
                    b2:e0:ae:d1:ca:20:13:58:c4:21:b2:0c:e8:bf:4c:
                    a3:9c:e4:81:7f:43:a9:91:dc:94:f3:b5:ee:a2:3a:
                    a3:33:f9:3c:65:9b:6a:1b:ea:e0:22:d3:f2:34:89:
                    b2:c7:bb:cd:39:52:b8:dc:8a:82:03:b3:c0:d0:f3:
                    37:16:ef:b7:5e:aa:c1:7c:99:56:5e:88:e7:ea:9e:
                    5a:96:c6:78:7d:bb:15:36:fb:59:6b:29:ab:d2:f8:
                    1f:ce:c8:17:9d:6f:9e:10:2a:0d:ca:fe:61:fb:92:
                    3c:65:02:ed:03:2a:c3:91:38:07:18:3f:93:09:86:
                    98:ad:8f:64:82:7c:74:72:a3:ea:11:15:61:d3:c7:
                    d1:48:cb:16:d2:f2:0d:88:43:27:68:e0:d6:21:14:
                    a2:57:c8:5e:d6:37:73:80:75:5f:98:59:2e:1f:92:
                    07:eb:cd:58:fb:2b:04:49:6d:1f:a7:43:4c:d2:39:
                    1b:50:c9:29:0e:c6:2c:bb:f4:60:f1:5f:d0:3f:63:
                    93:60:0e:02:50:a6:d7:1a:d1:8f:d4:6e:a7:05:04:
                    d7:c8:b1:5e:70:31:a7:fa:f6:55:a1:71:9e:f6:71:
                    e4:8f:81:fc:70:06:09:0a:fc:80:58:41:61:d7:5c:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2C:EB:7F:24:03:EE:4D:72:E1:CF:F6:B3:DD:01:66:DC:36:72:82
            X509v3 Authority Key Identifier:
                keyid:FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:30:be:0a:46:71:b0:ce:ac:d2:0c:94:be:3d:fe:46:43:
         66:71:f3:0e:24:d4:dc:e7:83:da:85:39:70:58:b2:90:85:be:
         ad:90:b4:a5:7b:f0:49:cb:a7:e5:eb:63:33:a5:c6:99:c6:d0:
         31:63:59:79:c9:26:1f:e4:6f:b9:d8:8c:68:e7:da:a4:63:12:
         68:3f:c0:38:01:6d:9d:fa:80:63:11:61:bd:8c:8b:df:84:c0:
         df:02:b6:d5:46:13:b3:e2:de:c3:b8:59:ff:c2:80:8f:56:50:
         78:0e:6a:9b:65:0c:f8:e6:b1:0e:c6:90:c8:c9:b4:ed:e9:d1:
         95:be:3e:75:fd:d6:27:cb:07:ae:82:46:1c:16:c2:67:9c:de:
         c6:70:93:59:af:0e:d6:68:b9:95:80:80:48:b6:74:7a:ac:00:
         0b:13:4f:4c:c3:c4:2e:5d:e9:03:9e:c0:ad:7a:37:35:84:9c:
         36:1d:0a:9b:59:2e:b3:6f:e9:e6:ea:e7:7e:38:c7:26:43:25:
         93:fd:5d:2e:be:88:7c:e1:9e:d8:aa:bf:3c:b8:da:65:70:9a:
         65:88:72:4d:ac:6f:96:6a:56:8b:45:21:cc:48:2b:29:bb:00:
         93:93:f5:55:d6:5b:4c:85:a8:10:6b:b5:5d:e3:2e:1d:ee:d8:
         de:e6:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----