Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
File:                     FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json)
Hash identifier:          drWA6te8LfqWHb1ddmnh2qDzabTC+pdUexQs1BuY4Xo=
Subject key identifier:   AA:A4:A5:F9:C4:E7:21:1D:AD:A3:A8:CA:43:80:B1:37:AC:12:D5:2B
Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA
Certificate issuer:       /CN=14446466c71d24658c8b6f7eae5305febd17a4ba
Certificate serial:       01962E2B1D239FE2A19610F45C9101B1F94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft
Manifest number:          0778
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: wtvktEIsrAcxHLfXyYGb5HJw26j0/9/q8xM8GA1cZkg=)
                          2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:23:9f:e2:a1:96:10:f4:5c:91:01:b1:f9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=aaa4a5f9c4e7211dada3a8ca4380b137ac12d52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:2f:ea:a3:42:bb:bc:25:6b:81:86:ef:ef:
                    2a:98:da:33:61:32:58:d9:47:fd:b6:12:ee:61:4e:
                    e3:c6:5d:57:9f:43:90:fa:a5:67:e5:2f:14:31:f6:
                    74:3c:aa:61:39:cd:c8:7f:60:15:03:24:4e:c0:b5:
                    2f:f3:c7:3f:80:41:bf:ff:7d:ad:ad:f5:3b:75:98:
                    52:d7:7a:9b:3d:6d:8c:33:d6:d1:1b:70:f9:e5:23:
                    ee:c2:5c:9a:6b:c6:d5:63:71:2c:2c:85:0b:c8:f6:
                    51:ce:87:be:9c:9b:1e:4f:0f:cf:c7:14:3d:98:c5:
                    c1:ef:e8:06:b3:13:bb:c8:ed:b5:02:33:b9:63:f4:
                    e7:1c:41:5f:c5:16:f4:c2:f1:86:2a:03:c4:76:f0:
                    b2:dc:10:ff:8d:92:e1:90:7f:36:6e:94:84:40:7e:
                    15:a8:3b:3b:dd:2e:16:59:12:21:87:1f:bd:24:6c:
                    da:64:be:bd:ea:e4:de:4c:ca:95:54:f1:75:cb:95:
                    20:0f:b4:23:a3:b0:bf:cb:97:6f:57:49:61:0d:d0:
                    11:2a:c2:2c:97:99:57:85:0a:7f:86:4c:aa:d9:10:
                    b7:28:3f:ea:68:fd:f4:d9:80:28:5b:dc:f5:4c:29:
                    07:19:97:0b:a0:2d:dc:8e:a2:71:55:ee:2a:8b:7d:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:A5:F9:C4:E7:21:1D:AD:A3:A8:CA:43:80:B1:37:AC:12:D5:2B
            X509v3 Authority Key Identifier:
                keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:31:01:d5:79:9f:10:a5:9d:ea:7e:a7:06:69:8f:a2:4c:63:
         49:9c:d5:01:d8:29:e3:3b:a5:ec:a1:fd:1e:f5:d4:38:71:a9:
         9f:08:c2:59:c4:b6:77:90:6f:a8:7e:64:2d:f6:5d:fa:53:42:
         8e:d2:7f:20:67:d0:2f:40:98:a5:e3:96:fb:ea:0d:af:55:ee:
         5f:b4:13:9f:fa:2f:77:12:8f:ef:72:d4:59:ef:df:6b:f9:c8:
         1d:28:f3:34:5e:19:5f:90:37:bf:ea:52:7c:ca:fa:c7:a3:01:
         db:0f:70:2e:8e:91:fe:88:27:dd:a1:52:d0:96:19:b9:98:c8:
         94:9c:70:ae:ad:57:ab:ac:d0:17:e8:88:fa:b6:11:11:b4:de:
         39:35:b1:2e:db:8f:14:61:40:d9:ca:a6:dd:47:cf:9a:69:28:
         6a:84:e7:83:71:14:ec:57:98:3a:da:68:98:41:f5:dd:74:2b:
         8d:6e:59:01:4d:53:5a:4f:f7:08:d7:ea:0f:a3:21:df:ee:2a:
         cb:9f:d1:17:00:5e:16:87:f9:91:14:6d:f2:a6:5a:1d:38:94:
         9e:7d:e1:62:22:49:63:82:47:cc:41:58:e1:77:63:b2:68:05:
         a3:f7:01:bb:7e:ae:48:ef:76:ae:40:c2:68:9c:8d:d4:45:30:
         e7:f9:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----