Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File:                     _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier:          ovw7Nf06LghTQqqrjM7tp7hdE/6684+XZ+y2PD8RkU4=
Subject key identifier:   DF:52:BD:4C:E9:BF:95:0B:94:AC:A5:D4:B2:18:3C:40:0E:0D:A1:BF
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer:       /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial:       01962ECFDE27ED517DB834FF9EE1D91708BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number:          1237
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
                          2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
                          3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: vteeJk5b3I+HzZoYKmKaQA3P6WmuR3IFaqWUvocDxQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:27:ed:51:7d:b8:34:ff:9e:e1:d9:17:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=df52bd4ce9bf950b94aca5d4b2183c400e0da1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:c6:33:74:fd:09:74:75:07:ee:8d:68:01:
                    98:3c:dc:7e:35:73:ce:04:9d:e5:9a:8d:ac:01:30:
                    b4:cf:f9:4c:44:fa:3c:ca:2a:01:71:1e:bc:f7:e6:
                    ce:c1:cd:74:ab:02:79:ec:bd:d9:54:b5:78:12:56:
                    30:fe:43:d4:c5:75:68:54:45:fa:f8:4a:34:19:e7:
                    bb:47:59:e3:a5:d4:89:8b:2c:24:6a:f8:dd:e1:1f:
                    6c:e4:b8:b9:f1:3e:e2:ca:9d:f2:e4:47:11:06:dd:
                    60:5f:8e:47:eb:3e:96:de:f5:99:9d:83:ff:18:6f:
                    7a:c4:ca:a8:5c:be:c1:35:86:39:28:02:05:48:5e:
                    ca:7e:93:1c:d4:54:3b:e5:18:60:3f:a9:99:c0:26:
                    fb:92:4e:fa:b5:bf:5b:70:41:c3:75:de:60:cb:20:
                    5d:3b:80:4f:c4:69:5a:71:dd:b0:5e:c8:d3:2b:1f:
                    18:bd:8d:1b:33:3a:25:54:9f:42:0b:14:6c:5b:ae:
                    7b:da:fb:37:9a:54:26:95:65:e3:00:d2:d4:05:2e:
                    2f:9f:5b:7c:77:57:17:41:f2:9c:43:7c:03:78:c3:
                    ac:09:88:95:7f:d8:5b:6c:1f:42:39:7d:1f:3b:f5:
                    81:7e:57:89:ba:33:21:96:f5:ae:f6:ee:64:8d:35:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:52:BD:4C:E9:BF:95:0B:94:AC:A5:D4:B2:18:3C:40:0E:0D:A1:BF
            X509v3 Authority Key Identifier:
                keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:d6:94:39:a6:fe:26:6f:76:5f:fa:f5:20:2a:af:f4:1c:
         6b:55:be:b4:e4:c5:df:da:c4:53:a1:f3:87:74:c1:e3:f7:a8:
         6f:3b:13:12:07:7c:50:33:95:c2:0b:25:b4:e5:a0:b6:8a:59:
         a8:db:ba:7f:77:65:16:5f:26:80:27:a9:d9:7e:5f:7c:68:87:
         15:75:6e:ca:7e:99:68:df:cb:a6:2f:10:08:b7:5d:46:cc:6f:
         fa:85:34:f3:5d:45:b7:a2:db:e9:75:1c:67:16:f3:69:78:06:
         10:f9:28:e4:29:aa:7e:39:15:e3:55:58:6a:27:3e:78:88:54:
         ca:88:f6:fb:fc:0c:6a:ec:68:da:e6:09:bf:93:9a:be:d9:27:
         44:16:8e:35:57:83:39:b7:a2:99:f2:3b:f1:44:43:34:da:35:
         ff:b2:51:7a:24:29:6b:2e:ec:b7:86:98:60:37:2d:e4:5a:fd:
         12:c0:cd:ce:37:3e:9a:44:bf:e6:b2:5d:ee:b9:b7:d9:eb:0a:
         44:14:7a:18:a7:bc:19:b6:3b:55:10:04:17:58:fc:d8:f3:47:
         15:46:8d:08:f7:96:c9:5d:e6:9b:04:ca:68:b9:67:64:87:af:
         71:cf:2a:7a:bf:2f:bf:6a:3c:0e:a8:b1:05:1d:93:da:db:34:
         64:47:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----