Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          +fKN0R96UsWDt0hdCalN6O0keq5ooW1K9ojuhN343QM=
Subject key identifier:   1A:2E:3B:5F:BC:CC:B1:C4:35:0E:60:D5:8A:3A:57:3A:07:87:76:DE
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       01962E98C1177C2C5F0A02F740DF0ABB4DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: l5kkBDfT+nJ5zNiRefHkOmkapO93AaVRbmB7mpg6zPs=)
                          2: epUYONx2mMHAiQMdD14emQB7r-U.roa (hash: SxHE/bA3BxkoeRagJK9EC66MO/tpuAW/+EUlbcMxgZM=)
                          3: r4X2HvAwh5ygol1cL2nGNDVz3U4.roa (hash: 7aCXdpb3SzbFP3HJ9KQNb5y78LcqzI5vEIV6FBttc2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:17:7c:2c:5f:0a:02:f7:40:df:0a:bb:4d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=1a2e3b5fbcccb1c4350e60d58a3a573a078776de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:0a:bc:da:c4:4b:e6:c2:ce:d7:96:e4:7d:
                    6b:70:d0:4d:ba:b2:e8:04:df:cb:d5:ea:36:91:6b:
                    20:a0:b9:e9:43:b6:14:b7:cb:2a:c7:d6:a6:d3:67:
                    e0:58:ec:d1:dd:b8:9a:75:d2:e6:e3:a7:79:dd:40:
                    a0:f5:9a:6e:68:2c:21:89:45:ed:23:ad:f6:5b:77:
                    9f:05:70:6d:da:06:f0:d4:03:ea:fd:25:de:f4:03:
                    1a:65:26:c8:48:1a:1b:3c:1b:cb:62:b1:74:cb:0b:
                    b2:fc:37:22:4f:8a:0e:ca:48:84:17:e4:7a:f1:da:
                    a1:7d:81:d6:68:fb:0f:ef:e4:38:f3:9c:8e:9e:89:
                    1b:7c:7e:51:39:a3:43:e7:f6:01:05:cd:64:63:4b:
                    69:a5:cc:85:29:df:2e:f4:0a:2e:23:4a:74:63:81:
                    ff:91:f4:fa:2e:25:bf:22:c3:e6:67:97:65:45:d8:
                    a1:fa:7d:74:e9:81:bd:b7:b7:d2:6a:12:13:90:c7:
                    3d:1d:57:47:23:ce:db:19:37:e9:56:0b:a6:6d:80:
                    71:e7:d8:5a:ad:b8:df:42:33:63:81:06:12:af:e9:
                    9b:39:8f:9b:f6:ee:28:46:e1:67:79:f3:92:18:a1:
                    e7:c6:bd:96:94:c6:f0:c2:e4:8a:10:9c:fb:91:21:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:3B:5F:BC:CC:B1:C4:35:0E:60:D5:8A:3A:57:3A:07:87:76:DE
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:72:a0:ca:70:52:ab:66:01:e4:f1:96:95:8d:86:8d:12:bb:
         7a:6e:66:4b:d3:05:f4:e7:78:87:c8:cb:76:99:27:f5:ff:8b:
         53:c1:e8:21:d6:f7:76:5b:bd:de:cc:a2:59:34:11:6e:e1:37:
         51:3d:df:a2:a0:d9:87:de:91:63:0a:c7:95:50:a1:45:5c:c1:
         47:70:fd:d8:00:56:e5:1d:9b:a0:44:d1:8d:09:06:04:1d:af:
         d2:a4:fd:89:3a:44:1d:91:7f:51:5a:b1:ee:22:86:12:d9:38:
         77:b7:6c:41:88:c7:42:89:83:fe:15:11:37:f2:70:0e:a6:10:
         cf:ec:c2:af:08:73:01:b1:89:a8:77:1e:65:92:e7:22:18:1b:
         dc:e1:09:e0:7d:8f:b1:02:e9:1a:d7:98:1a:25:9e:18:d5:3b:
         f8:b5:86:61:61:bc:c6:b0:aa:50:e4:ab:e5:bc:49:a3:36:c5:
         18:73:0c:55:98:ad:fa:7a:51:65:7e:d5:be:19:ad:d2:e1:aa:
         18:17:1e:d4:99:4a:84:b4:3b:15:e1:56:e0:d5:c1:08:8a:82:
         53:b1:b5:18:25:e7:ea:9d:fe:2a:e3:0a:46:3d:06:40:21:ad:
         e0:3b:ed:09:85:bc:af:e8:e0:0b:04:28:0d:05:dd:b9:c2:9f:
         94:ed:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----