Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File:                     4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier:          aRe5J1k1F39D74t8CsirLkkz7xgIG9W9NTb+N/e6NbU=
Subject key identifier:   1A:86:60:7C:08:DA:D7:90:11:C7:12:65:8B:06:16:57:66:E5:5D:0F
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       01962F3D617E8B51E2C051EC664B0AA84BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number:          14FF
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
                          2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
                          3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: igXPvLebfGoqni9RaxxzFO7p+ZBirBBx7sC4GG9Rzvs=)
                          4: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
                          5: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
                          6: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=)
                          7: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
                          8: jXfsq-_2CipGq0wifdzOP5Bu42E.roa (hash: B+Vl6cetYE9FE60cfwuEU2uuw7BLT4iX6yuDh5BtpGk=)
                          9: yMoGVUgWkLcjGd-eCHwp0f7sYEw.roa (hash: zWDi7LVWgZCgN22tu3iijDKXUYSQ4BnSDtV5uO573e0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:61:7e:8b:51:e2:c0:51:ec:66:4b:0a:a8:4b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=1a86607c08dad79011c712658b06165766e55d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:36:e2:0f:c9:55:51:7d:cb:fb:6e:87:2f:
                    39:fe:74:34:f7:69:20:14:23:f9:25:ab:c9:6d:9f:
                    a3:6c:4b:fb:c3:cf:ac:75:90:02:b4:c9:a9:14:a9:
                    05:c9:ef:0c:75:d3:d7:89:b7:19:92:61:1c:46:a9:
                    2a:89:58:f7:ea:c4:2f:e0:cf:88:1d:17:4a:a6:41:
                    2c:ce:22:28:74:f5:29:ae:2f:96:1e:74:e5:94:9c:
                    fa:de:8e:e7:62:76:ff:ff:1f:29:52:8e:c4:24:0b:
                    45:8c:57:83:34:e0:ba:b0:f4:46:21:bd:50:73:83:
                    63:77:59:4b:f9:0a:14:13:ea:87:fd:e9:8b:95:07:
                    ef:68:7c:fa:92:b2:02:4e:65:52:ec:0f:ad:07:95:
                    50:b3:75:be:36:dc:04:79:c5:6d:7c:a1:62:50:a5:
                    cd:c8:e7:fc:e2:78:38:05:39:ca:98:98:1f:3c:19:
                    78:88:5a:42:a6:11:6b:b7:d7:1e:7c:2a:87:14:fb:
                    3b:aa:f3:15:3c:15:e8:f2:cf:72:ac:ff:7a:08:d9:
                    66:6b:df:f3:98:dd:3d:d2:7e:0d:c3:a6:e3:6d:f6:
                    5b:20:46:f4:c9:99:e8:af:7c:be:1a:df:49:52:ba:
                    47:88:b2:7c:3d:36:26:e8:06:0d:19:7e:f9:d1:f1:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:60:7C:08:DA:D7:90:11:C7:12:65:8B:06:16:57:66:E5:5D:0F
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:af:f6:ae:a6:09:13:40:a2:99:39:79:94:9f:be:cd:99:10:
         bf:83:d0:30:ce:e0:85:9e:ac:6a:3e:68:98:ff:2f:a7:f4:bf:
         87:f8:96:4e:9d:e8:81:36:6f:67:d5:3b:b0:b2:b9:f7:13:99:
         5f:52:d3:0e:1e:2a:16:4c:38:c9:e0:9c:c6:86:99:f3:e1:74:
         9b:ed:95:8b:31:55:59:25:96:a3:29:32:e4:72:f2:11:18:68:
         be:cb:0f:02:0e:be:d1:f1:c3:45:01:ee:17:0f:22:6f:0e:f7:
         b2:f6:c5:dd:1d:6d:8f:8f:1c:27:5b:c0:db:de:d1:09:26:61:
         7a:6f:36:9c:b6:01:14:bb:d7:b1:b9:fc:75:1f:8f:d0:91:ac:
         95:15:66:94:58:b0:6b:92:b0:98:1b:16:fc:9e:b8:bb:80:37:
         e1:48:d0:8d:e7:c8:c5:a8:bd:69:43:f9:3e:32:0c:fa:38:b9:
         97:5b:2c:79:d5:e4:6d:fc:9f:99:72:7e:b6:d1:ee:32:84:47:
         b7:90:0e:bf:75:1e:bd:81:02:b9:41:81:9b:59:86:35:64:7d:
         03:14:24:5f:b2:91:c8:87:60:fb:17:c8:62:1f:0a:ad:99:72:
         00:a0:e5:e8:55:18:af:6c:1b:97:59:a0:9e:56:9b:8e:f6:23:
         9c:08:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----