Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File:                     1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier:          1DYy6GuikTmGpuzIhTF7ZeWEQHXnnHNA4R4bysoFi8Y=
Subject key identifier:   DB:ED:FE:6A:87:BF:5D:4A:A7:C6:96:47:DC:1F:58:1A:03:D2:A4:2D
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer:       /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial:       01962E987105EFF7F79B1103C6297823462E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: vzvWLdryaUc3A4qAm3NhYftwS14SgwXrbOGiEz8srUk=)
                          2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:71:05:ef:f7:f7:9b:11:03:c6:29:78:23:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=dbedfe6a87bf5d4aa7c69647dc1f581a03d2a42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:a6:8b:20:41:b7:6e:7e:4b:ac:c3:12:24:
                    98:88:7a:88:51:6a:ce:89:90:f1:97:e5:56:25:04:
                    53:95:0a:c6:6b:2f:d9:e6:18:91:4f:78:82:97:46:
                    c7:91:66:12:30:14:ee:a3:89:5f:f6:b5:88:c8:7f:
                    e5:fb:01:ea:9e:7a:41:86:a7:1a:37:11:1e:04:05:
                    a6:f7:f5:b5:dc:77:8c:de:91:02:df:7e:82:ae:a1:
                    53:5a:b0:35:3d:cd:cd:ef:1f:cc:57:fe:27:28:c1:
                    c9:ef:90:cb:cc:b4:92:69:28:72:1c:8e:bd:aa:0e:
                    c8:87:42:5c:11:c4:50:02:8f:28:66:bf:3f:fc:50:
                    30:e7:41:a4:3c:f6:86:3c:be:47:45:58:80:98:27:
                    22:cf:ab:ab:4e:d9:f4:98:58:a8:da:95:91:e8:8a:
                    1a:27:d2:9d:dc:21:f3:e1:61:49:cd:58:a3:00:57:
                    41:fc:53:4b:08:bb:64:ce:ea:2a:ea:90:5b:07:bf:
                    be:1d:72:07:24:06:27:82:af:8f:e6:4f:fb:2a:9a:
                    5b:43:54:72:c1:d8:11:c2:d7:11:78:dc:3e:a4:ad:
                    be:56:74:13:6f:f2:4f:f9:31:4a:45:3c:55:46:87:
                    a0:44:13:90:7a:43:81:56:d9:ed:a8:3d:64:e7:a4:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:ED:FE:6A:87:BF:5D:4A:A7:C6:96:47:DC:1F:58:1A:03:D2:A4:2D
            X509v3 Authority Key Identifier:
                keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:8c:cf:b4:ad:d4:47:63:42:12:ca:4d:b1:bc:48:e0:4c:
         f5:3c:b0:74:08:28:f3:e8:f5:b2:26:66:2e:e3:87:bd:c6:8d:
         92:15:d1:74:25:28:4e:78:e2:9d:12:4e:bc:8c:67:9f:2e:ea:
         89:ff:8a:dc:61:88:eb:57:f7:7a:61:0e:a6:6b:bf:4a:83:99:
         f1:17:a2:9a:ac:8b:25:6a:f4:66:3d:4f:b1:5a:18:b4:9d:99:
         dc:5f:c6:c2:2d:35:cb:33:2b:97:3c:46:50:d7:8c:68:51:a1:
         ca:c1:dc:75:cc:78:68:e4:0e:dd:2a:40:71:c1:b5:c1:b0:ae:
         c9:30:bd:b7:76:9e:ed:55:69:c3:79:9d:31:22:7c:4d:50:3a:
         6e:7d:30:b4:bd:2c:52:91:4c:de:c5:7e:7a:45:5c:0d:f7:9b:
         19:35:00:e8:84:d2:b2:7f:6d:9b:46:8b:1a:a4:be:e6:cb:29:
         8d:1d:a0:55:74:14:80:31:81:68:b1:db:db:d0:c7:a2:44:d0:
         da:eb:bc:79:68:ee:03:5b:96:b5:ac:c5:e6:d1:f0:20:07:6a:
         1f:0f:e1:d5:45:69:69:e7:59:2d:4c:d2:6f:07:e0:4e:e0:f6:
         ba:e0:20:bc:a7:9e:dd:57:2f:f9:c9:9e:5d:c4:c3:32:cd:ee:
         d1:fa:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----