Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          GHKnBz9VFvHT6eReO6pRCycWHNd16mFp81BZeujCCDI=
Subject key identifier:   7E:E7:87:3E:0D:02:4F:1F:83:19:20:C3:D0:24:85:B6:FE:F1:22:5D
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       01962F743248445CB40A56F99CF108D718C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: bsFUx77H3j/t9dD5hQhbmtsuLXaIUcfCM+5rV0PHogQ=)
                          2: 3fenuBwvB7wV3uASD-r_76wX2Qk.roa (hash: a5u8qqHNJ/g2qfpTOvTXK85cODmIHay31MoapuJ0tsI=)
                          3: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=)
                          4: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=)
                          5: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=)
                          6: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=)
                          7: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=)
                          8: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=)
                          9: mDRyfngxgYL9lEVKzyAkCQzkYsA.roa (hash: Md6fZymUQHzfcYJLAnblEk5P1I8XxKhta5Tqwb60pgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:48:44:5c:b4:0a:56:f9:9c:f1:08:d7:18:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=7ee7873e0d024f1f831920c3d02485b6fef1225d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:d4:24:f5:74:58:e7:ec:79:43:8c:14:c1:
                    a2:73:9e:0c:d0:94:94:1e:37:75:60:73:39:0e:3d:
                    c1:a9:49:0f:68:a3:d9:63:9d:53:b1:f1:20:b4:6b:
                    b7:fd:1a:6f:ea:96:e3:7a:44:e0:16:db:2a:c9:39:
                    f5:08:9a:e2:1a:76:63:34:33:97:e8:3b:c0:6a:44:
                    59:08:16:a8:7c:97:42:15:5f:8e:c0:65:84:c4:61:
                    a1:f9:55:af:74:07:26:5a:ce:2a:8f:b9:56:6a:02:
                    bd:61:4b:03:52:0a:2e:8d:8c:72:de:ac:85:77:d2:
                    10:58:fd:40:ba:66:4d:17:be:8b:da:0e:54:38:6b:
                    3e:78:dc:5b:53:3d:32:a1:2c:ad:fe:f7:39:ff:01:
                    b6:94:9a:b7:a3:54:01:c3:61:5f:44:a6:67:3c:6a:
                    3c:4d:61:d4:c7:c4:d0:f5:e4:c5:1e:90:1c:af:ea:
                    e3:26:26:5b:5b:01:e7:be:9c:ac:8d:8a:e0:1b:98:
                    63:eb:e9:b1:f0:e4:89:3b:3f:af:95:33:69:dc:77:
                    88:13:5d:84:b9:0e:ea:f0:c7:88:12:f5:1c:26:df:
                    54:69:62:ce:9e:ac:3c:f4:bc:41:fb:44:3b:d6:ab:
                    7c:f1:51:2f:0f:36:26:1e:90:ac:c8:f1:63:39:78:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:87:3E:0D:02:4F:1F:83:19:20:C3:D0:24:85:B6:FE:F1:22:5D
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:33:43:0e:fb:60:b0:bc:98:98:f5:5d:ef:e7:0e:7e:4b:28:
         50:26:0a:a2:ca:82:1f:43:26:fa:a5:80:73:08:ec:65:29:12:
         8e:35:ca:ef:a5:56:30:92:97:9d:75:b9:73:a4:a9:59:ae:2e:
         4a:46:bb:52:b4:2f:55:db:ca:d1:f0:57:ed:11:ca:ac:51:fe:
         fe:d9:aa:c6:38:a5:d3:5d:ae:23:3e:7c:5d:35:b8:39:2b:b8:
         e9:3d:36:ea:c8:66:c9:3e:dc:6f:a0:d8:b8:db:68:40:46:4c:
         4a:79:b8:4d:17:b1:61:28:cd:86:5a:5c:9c:0a:78:e3:a8:6b:
         62:dc:4f:e7:43:bf:72:a1:43:fe:42:ae:10:d8:f1:45:34:9e:
         59:cd:6e:e0:34:1e:43:26:0e:77:b9:6f:a2:d7:ef:01:b1:4b:
         ab:25:fc:cb:eb:a8:f6:7b:e0:5b:9a:d3:ea:25:e2:87:db:95:
         2c:ba:ef:34:20:68:04:60:c9:c9:8d:cb:aa:61:6b:79:dc:5c:
         85:df:77:1e:07:e4:b0:36:b8:13:46:fd:63:60:02:20:04:f4:
         18:be:97:83:f5:07:03:f6:01:c6:2d:7e:a5:83:ed:6f:3c:02:
         15:0d:05:2a:18:fa:da:a5:b3:17:9c:e7:a9:e5:1d:ba:4f:8d:
         2c:68:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----