Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File:                     1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier:          P7zgw6/ZNtira+dJxksQ78doR7l1eqme+LasItPV36w=
Subject key identifier:   E0:36:CE:CC:29:A1:C9:2E:82:40:37:FC:37:41:F1:A8:00:FF:E3:11
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer:       /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial:       01962F3D7029BA032ABEA22DCEB6551CBC92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: rxZHGY6SW/PaXtTZV34kQTcEvuvA2AsqjZ7OhN8IrP4=)
                          2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
                          3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:29:ba:03:2a:be:a2:2d:ce:b6:55:1c:bc:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=e036cecc29a1c92e824037fc3741f1a800ffe311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:49:c6:34:36:22:25:dc:af:9c:2b:51:41:
                    67:e9:19:89:20:75:83:b0:24:7d:5e:9d:f7:fc:aa:
                    85:3c:e0:03:b6:a3:18:ff:a8:36:9f:44:05:91:63:
                    43:ff:03:65:c6:1a:e8:ff:e6:6f:e1:a3:77:39:f7:
                    e3:93:ea:a4:87:56:6f:69:5e:aa:86:62:26:0e:8e:
                    af:ef:91:c9:2d:ed:a5:5f:3e:31:1d:c7:ae:b5:c0:
                    c7:be:47:e6:41:7a:10:92:ed:0d:56:f2:f1:19:8d:
                    81:b8:52:f4:25:19:64:28:ea:78:c9:05:05:31:39:
                    08:91:32:59:31:a7:2d:61:30:19:1a:aa:22:71:e5:
                    93:46:1a:9c:44:dd:23:ff:b5:60:04:f6:12:5a:fd:
                    c4:f3:b4:87:67:0f:b0:b5:23:23:e7:4a:1a:93:4c:
                    37:a9:c3:64:62:06:97:97:4b:7b:3b:ae:9f:7d:35:
                    10:dd:8d:8e:67:a9:ef:8f:38:70:05:d9:c5:1b:7a:
                    2d:8c:13:1e:7a:07:42:7f:12:a0:32:04:7f:af:03:
                    56:c3:45:0e:d9:ac:51:0d:b2:4c:24:e3:c4:66:96:
                    43:79:84:47:f5:61:14:97:97:d1:89:c9:5d:70:90:
                    6a:dd:58:9b:4b:37:53:98:6b:85:69:21:f8:8b:95:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:CE:CC:29:A1:C9:2E:82:40:37:FC:37:41:F1:A8:00:FF:E3:11
            X509v3 Authority Key Identifier:
                keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:2c:f7:e9:98:ae:d0:36:39:bc:43:c4:92:6c:19:65:64:
         cf:3a:0e:cc:cb:ac:12:24:e4:43:c5:11:85:a5:0c:c2:26:16:
         d4:eb:2b:3f:48:f0:4c:d6:92:83:e8:ca:17:c3:ba:eb:32:a3:
         02:e4:5d:77:26:3d:98:b8:26:23:36:13:9f:8b:cd:b4:b4:59:
         be:64:1b:9f:5c:b7:dc:5f:a4:8e:58:cb:f8:a9:86:f1:d8:b1:
         b3:84:eb:47:42:95:7b:56:14:74:e2:e5:bd:18:61:a8:87:8b:
         15:e0:01:69:c4:31:bf:04:55:0f:ee:16:4d:f4:bb:15:03:c9:
         c3:d7:f0:49:0b:85:b1:2b:9d:2f:c8:a7:0e:45:33:6c:16:6f:
         62:5f:3d:04:91:53:17:be:87:37:49:db:f4:4c:6c:32:c6:55:
         df:c7:8c:a8:b5:5b:cc:12:f2:5f:f8:66:16:2f:63:ec:a9:56:
         18:7c:c3:bc:b0:0d:16:f0:48:2f:d1:16:39:54:54:46:73:bf:
         50:16:cd:81:d1:c4:51:5f:ed:d0:08:05:97:57:02:f7:f0:a6:
         63:97:c4:19:20:1d:e7:5d:b9:49:3e:8a:22:b1:ab:1c:47:23:
         fd:e4:48:96:08:d7:40:66:d7:09:69:68:97:11:0d:51:fe:14:
         44:f3:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----