Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
File:                     femPSOmIeQ0OB5NTeUG0E9LmAwY.mft (raw, json)
Hash identifier:          tV6CsIZXMazajJEP3M16g/D97tMNzf8OtrZ/j4dwzx8=
Subject key identifier:   DF:3B:7F:24:D4:D9:0B:54:1F:51:35:D4:AB:C7:94:FA:16:29:51:BD
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Certificate issuer:       /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial:       01962DF3CB87D4AA747FC59CCA59820497BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: L1sOGUpC5vf81IjAWo9yjqNWdoc.roa (hash: qAhDSU9NhG7HL0VsMDn5fszVhTOJb2FN5MRmMe3Ne7s=)
                          2: VGUAWcdE_uWGBzoEXuUWxSaeofE.roa (hash: ldYqKdQLO9amLNP7UTQrP4DX3OqZoopvjfltJwygHwg=)
                          3: akdoIFbGGphPsOua6vOPfJFx_n8.roa (hash: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=)
                          4: femPSOmIeQ0OB5NTeUG0E9LmAwY.crl (hash: uB7MDHGuZIDfPKyzeCmTirMNtTwwQtue7u0W1jeuCjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cb:87:d4:aa:74:7f:c5:9c:ca:59:82:04:97:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=df3b7f24d4d90b541f5135d4abc794fa162951bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:9d:31:80:c5:8b:ab:13:b9:df:13:cb:f0:
                    46:d6:68:cd:5e:64:7b:92:19:bf:ec:8a:e0:a4:d1:
                    77:34:d3:b6:26:da:3c:0f:5b:98:8e:e1:b6:ed:52:
                    f2:8d:14:b8:f3:3a:5a:11:d1:50:f6:47:ef:bd:8f:
                    3e:6d:6c:cf:64:17:10:02:a4:1c:90:2a:5d:50:da:
                    15:16:29:c5:e6:7b:fb:1b:29:05:dc:94:b9:5c:0e:
                    c1:3d:4c:6e:24:61:74:1b:5b:de:60:c8:87:0f:ef:
                    e1:dd:3e:06:c9:1e:6a:75:8b:c4:54:aa:90:ff:b0:
                    e8:73:fb:d5:4e:47:14:c2:0c:cf:ad:86:0f:6c:53:
                    5e:74:de:31:63:64:89:cb:bc:f4:b8:00:93:b0:d3:
                    e5:2c:16:1f:d5:fd:67:8b:c6:2b:35:a0:00:9b:e6:
                    b9:cf:06:b2:72:8e:fb:cb:ef:d7:f1:9a:08:95:5a:
                    6d:f4:d9:b7:89:54:7e:7a:be:84:79:b8:39:16:1b:
                    76:2d:8e:d6:ec:48:a2:0a:61:ae:4d:68:9f:f0:99:
                    4d:19:e6:02:87:50:77:4d:79:1a:fc:47:8e:c8:4f:
                    58:7b:d9:03:c8:f8:49:5e:a8:77:76:19:ae:b6:99:
                    bf:de:99:f9:3a:2c:3f:fb:72:4f:ad:36:7e:8c:4c:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:7F:24:D4:D9:0B:54:1F:51:35:D4:AB:C7:94:FA:16:29:51:BD
            X509v3 Authority Key Identifier:
                keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:bc:6b:f4:f8:cd:40:6a:22:a5:ae:8f:dd:10:7b:dc:b4:
         ad:f5:f8:af:0e:13:74:4e:66:c0:c9:ff:de:5d:28:f9:6b:39:
         39:61:a8:e3:1c:ec:b2:8f:b4:49:54:f3:ff:57:01:b7:bf:cf:
         15:3c:c1:be:73:01:b2:64:b9:96:f4:36:c3:25:9b:6c:6b:c7:
         86:52:9f:df:80:3f:21:47:5b:db:8f:83:b0:ff:18:7d:86:ce:
         2b:f4:93:00:02:cd:61:80:90:c2:4e:e0:b9:11:48:7e:54:68:
         48:ff:48:d8:df:35:b8:36:a5:17:b1:14:0f:bb:e9:f6:a5:8d:
         40:fb:f8:8e:60:1e:0a:97:3c:ec:55:14:ee:aa:a2:55:64:27:
         85:28:c9:61:95:48:10:e7:8f:d0:be:66:6b:ae:6a:b7:91:54:
         eb:13:24:0d:1e:9a:05:23:c0:30:37:ee:f1:f6:a8:ea:f7:4c:
         86:60:84:6e:15:a9:e5:2c:35:6f:92:ea:63:7f:49:c4:bd:4c:
         22:10:21:44:bf:c5:1c:db:72:dd:e1:2c:25:23:66:56:36:07:
         3c:87:fb:f8:8e:47:58:d6:70:11:0f:fb:eb:63:07:5a:ee:f6:
         d5:fc:dd:6f:8a:7c:55:48:98:7a:85:04:62:c6:2f:c4:0b:d3:
         60:d1:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----