Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File:                     _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier:          Ngag68D5zTcLX/KMDISsHkKM1jewPHy/geTLslilkAo=
Subject key identifier:   89:93:F3:23:5C:E4:F1:E0:6B:44:99:43:C7:B9:D5:ED:FD:05:DB:02
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01962DF45ADCED1BDCC2F42566EA10A3BB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number:          0EA5
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: H-luNIooxpaPFael1QMBE9cTc2Q.roa (hash: 8PAzKkQGy3uQODeK1TdyR0ZOhf0X+RsaaEkCZwpxl6k=)
                          2: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=)
                          3: Oyop5ie0J1YYtu5t_uGmCo3zIS8.roa (hash: 874fXZpydXHD1cFuDPyWOHD0dYaQUqKnVNs6jbCBZlc=)
                          4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: cBcRFMx96erVkcCWr6LJIN+fVS+RNjWRGTPSA41jBvY=)
                          5: nNMaXspw-MfqxfuqJhcYFV82jgA.roa (hash: gu+ocwTZMdArCv67tGJH3aJs58XUzblrFVAVRYDEBOQ=)
                          6: vB6CmOcoFoubesxgyY0CLzYdM60.roa (hash: /W1q8tG5f08hM4qxFSwUdMUcXBLHBHpaugnqW8pYfMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5a:dc:ed:1b:dc:c2:f4:25:66:ea:10:a3:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=8993f3235ce4f1e06b449943c7b9d5edfd05db02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:7a:9c:c7:28:30:a8:b6:31:7a:50:14:ad:
                    dd:7b:cd:fc:58:63:d6:c5:39:49:af:73:5a:28:65:
                    e4:5e:dc:06:10:da:62:cf:fd:2a:30:8b:dd:b2:64:
                    c8:bb:cb:b1:ca:81:e4:3a:18:36:1e:c9:3d:53:b0:
                    b9:28:30:26:59:45:1b:69:31:ee:7a:3a:38:c1:6a:
                    64:d3:10:fa:62:34:80:bd:75:de:f6:ed:64:14:33:
                    f3:e5:40:45:6d:f4:df:74:66:45:87:12:48:6b:c6:
                    42:6d:0f:b4:5c:51:6a:7e:78:92:80:35:88:55:da:
                    03:76:bc:6e:ce:4b:f7:bc:ed:15:58:b0:0f:94:8d:
                    27:1f:34:00:9e:2e:16:d3:25:f7:98:20:a2:1a:75:
                    b9:be:4e:2d:8a:12:61:80:28:49:e1:59:0d:5c:15:
                    eb:c0:43:4a:d7:eb:0a:ff:be:12:58:f1:cf:f4:77:
                    a6:6e:d7:c9:bf:4e:b1:b0:d5:3f:2a:ed:f0:a5:ec:
                    d5:96:ee:2a:2c:86:36:43:b6:d3:78:16:2e:47:2c:
                    17:80:c0:5a:ab:58:21:e9:34:de:db:38:0f:0f:2d:
                    38:65:fc:1c:8d:14:d5:38:0f:96:f9:e6:e6:9c:62:
                    ca:41:c8:ed:a8:7b:c4:15:a5:ae:e3:f8:46:02:7f:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:F3:23:5C:E4:F1:E0:6B:44:99:43:C7:B9:D5:ED:FD:05:DB:02
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:77:e3:d4:1b:33:eb:a4:15:f7:5a:1d:f8:59:fc:42:ff:
         95:77:c3:14:6e:51:c0:df:51:70:87:12:63:1a:26:20:b1:43:
         ce:bf:13:35:b3:16:29:e6:03:dd:a4:60:d3:5b:42:dd:1c:01:
         eb:b5:71:a5:02:d5:88:d2:63:78:4b:3c:ba:f8:7f:27:a9:53:
         d7:81:46:62:f9:e4:06:77:ea:9b:28:a5:9f:f1:6c:1d:af:81:
         fd:27:bf:22:c1:c8:43:07:90:09:0a:1c:b5:d4:ad:76:3b:18:
         f1:0b:5f:c9:0d:9c:76:7b:15:d2:a3:ce:c7:aa:0d:49:02:9d:
         18:ce:9a:75:a3:a7:cd:fb:9c:70:e0:f3:a4:95:25:4b:50:7e:
         0a:13:ed:0b:d5:50:18:98:c5:59:c2:0a:38:ad:0b:1b:72:a2:
         ea:11:16:67:f0:5d:8a:ff:5a:3b:96:bb:36:03:1b:03:8f:27:
         ec:a2:5d:f8:f1:74:6e:82:56:8b:49:a7:ca:6a:ea:f4:10:d1:
         3c:ef:32:6e:f6:42:23:53:fd:f6:53:0a:15:36:70:d9:b0:c1:
         4a:91:86:5a:40:56:f9:68:9e:83:61:95:2d:bb:30:91:97:59:
         d5:13:54:84:14:96:49:0a:98:6e:77:46:59:f7:57:39:78:d6:
         3b:cb:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----