Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          L9EA+eNYy+koo7lnsrZsZ4DEeXFk4XVGZ7Jnu5TL6bg=
Subject key identifier:   00:47:AB:81:D3:38:9F:92:2C:82:DD:8C:49:8F:80:4E:60:10:E9:56
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       01962FAB9B0A38B2A11D4C866830597BBC71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: d4YV7y/do9tINOYUZkzXamYR++uf6sDqys7uMBXi/y4=)
                          2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
                          3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
                          4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
                          5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
                          6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9b:0a:38:b2:a1:1d:4c:86:68:30:59:7b:bc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=0047ab81d3389f922c82dd8c498f804e6010e956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:51:e1:52:35:53:92:82:6f:b5:b6:0d:27:
                    de:37:dc:c9:71:f3:95:90:07:4c:79:e1:52:6d:1d:
                    50:43:6a:88:6e:ac:72:51:ba:e6:31:25:36:96:a4:
                    06:af:11:b5:b4:49:77:bc:f5:3c:8a:93:f5:a0:a1:
                    1a:67:9d:ae:51:ca:c9:3f:3a:59:8d:40:e0:ab:9e:
                    7b:49:3c:77:49:a4:69:9b:f6:67:2d:34:4d:76:ea:
                    ac:5a:bc:8f:1a:40:aa:d2:3f:3a:17:a4:aa:b6:af:
                    84:01:f0:60:16:43:22:82:8f:27:ca:9c:85:43:64:
                    5c:d4:dd:60:00:85:e2:f5:d3:37:7b:aa:5e:f7:8b:
                    f2:90:13:ac:4a:f3:06:50:41:b6:3e:b4:05:06:1a:
                    91:8d:2f:b5:ca:b4:b2:22:5a:92:d1:4a:f7:51:71:
                    22:9b:e4:be:5b:d3:2f:fd:6d:ab:36:33:46:b5:02:
                    1f:10:6f:c5:01:3e:0b:ca:81:19:7a:d4:a8:57:39:
                    21:06:cf:d7:e7:d4:7b:b3:66:aa:54:20:26:08:b9:
                    0a:74:8e:36:ba:06:cc:8a:92:b7:75:5c:24:c3:ca:
                    34:74:16:84:a8:68:5e:4b:a4:63:52:c3:a5:35:7e:
                    14:7f:33:91:33:15:a5:99:ea:86:b3:dd:67:ca:12:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:47:AB:81:D3:38:9F:92:2C:82:DD:8C:49:8F:80:4E:60:10:E9:56
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:65:f9:93:f4:6b:a7:dc:95:37:3a:46:f4:41:3a:f7:e7:
         01:e3:e8:fd:3d:9a:f8:24:0c:ed:db:36:d7:cb:aa:30:2b:e0:
         a3:40:d9:f4:aa:d8:61:65:8b:8d:08:d7:52:79:70:be:d9:46:
         8c:55:47:45:51:3d:3b:2b:5a:93:8a:86:03:d5:47:26:aa:90:
         79:bd:61:c5:09:d2:67:c6:74:a2:81:f4:f3:0c:cf:b4:d2:74:
         bb:01:15:0c:ae:5a:c7:cc:e9:fe:9b:5c:c7:e9:70:00:8e:61:
         36:a7:ea:39:d2:11:be:bb:6b:c5:2c:40:48:b0:3c:20:ef:dd:
         68:c5:3e:f3:36:74:0d:59:82:06:8f:a0:dc:16:0c:60:ca:71:
         97:6a:53:4b:b0:5f:b0:1a:f1:fc:d1:c0:b4:e1:6d:ee:00:f0:
         27:62:6c:62:83:a5:bb:9a:41:b4:b3:fc:f8:4a:54:8c:3a:71:
         9d:11:1d:07:01:69:4f:36:39:39:a6:86:d5:8c:6c:4f:91:fd:
         f4:c0:ab:0d:01:52:9b:07:ca:5b:0a:c7:b6:3a:1a:2f:e7:c5:
         9c:38:4b:08:67:02:c2:c5:47:e8:06:92:3e:28:fe:85:7a:74:
         2b:79:81:9a:87:42:57:d6:ce:63:b0:08:21:eb:64:42:12:93:
         fe:62:d3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----