Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File:                     fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier:          pXL0H/h6f9/BQhurKvNtw4Wmu5y3VhyV+zY5g1VJook=
Subject key identifier:   DC:69:5B:0B:CF:10:CE:24:C0:91:A5:77:D3:C9:ED:8F:C5:36:0A:F2
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer:       /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial:       01962F073EC892F393D1964F6EAEAFDB08CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
                          2: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: ydBWrpknBp8r4OKRTx062NucLLvZKCCjyEy0TJnbaRo=)
                          3: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
                          4: li9wgS4CzymH0Pk4gTdAaGRdlAo.roa (hash: kP4uhWCvNqfaCH4owPFsoej6RgMi05GSx/V0iC7WmCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3e:c8:92:f3:93:d1:96:4f:6e:ae:af:db:08:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=dc695b0bcf10ce24c091a577d3c9ed8fc5360af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:53:22:d6:b6:31:3f:a9:27:3a:6e:3a:38:
                    14:79:a4:e7:53:8c:57:6b:a4:d1:0e:e7:d4:8c:d5:
                    82:e8:55:6a:d9:74:a1:91:01:ef:a9:48:39:87:c0:
                    ef:c9:bd:75:6e:55:71:b8:6e:a0:36:3b:21:38:40:
                    75:74:83:76:35:9f:99:ae:ac:2c:e3:0b:6c:94:07:
                    db:6b:65:e8:ea:e2:ca:7a:89:f6:5f:57:3a:fa:63:
                    71:85:d5:31:70:72:5a:60:35:6e:11:65:90:c4:ed:
                    f2:31:b2:52:f4:96:ef:34:0e:c1:eb:de:6b:b0:af:
                    a7:6d:76:c6:18:5a:dc:58:00:31:62:3e:19:f1:8e:
                    6e:70:67:8c:9f:1a:54:d1:86:68:b8:5f:26:44:39:
                    a9:ef:ee:b5:78:a2:d9:de:74:3c:33:9f:bd:3d:fb:
                    16:c8:58:30:d8:e0:c7:c5:e3:52:89:29:d1:d8:9e:
                    7e:e2:db:fb:2b:cf:2c:af:22:7c:7a:17:f6:cf:e3:
                    ce:20:b0:cc:d3:d5:a1:bb:a9:9a:95:ed:47:05:c2:
                    52:f7:b3:86:48:0c:2b:53:b6:a0:bb:93:ed:e6:d3:
                    fa:f9:2f:37:ec:36:b4:60:93:29:67:a3:69:a9:f7:
                    f3:2c:59:35:c3:47:55:bf:71:43:3e:84:07:24:a0:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:5B:0B:CF:10:CE:24:C0:91:A5:77:D3:C9:ED:8F:C5:36:0A:F2
            X509v3 Authority Key Identifier:
                keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:6f:8a:1d:ca:0c:1f:0f:12:6f:1f:c0:45:44:9b:39:67:
         2a:96:06:c5:e5:fe:0c:3e:49:ba:3e:e2:9f:c4:8b:eb:a7:8d:
         a1:aa:ef:27:14:0f:cf:83:9f:b1:63:6d:6d:6f:3d:6b:0c:cc:
         ae:a3:a7:95:e5:ec:bf:94:3f:97:97:ed:c0:26:48:b1:b8:6e:
         bd:ce:05:c8:19:8f:ab:48:5f:2d:44:b3:56:e4:a4:35:3f:fb:
         aa:fe:81:81:54:b7:ad:5a:f7:19:a4:34:17:b7:2e:22:aa:51:
         b8:07:d1:4c:e1:39:c3:0a:72:cc:98:a9:18:3e:24:3b:e9:73:
         31:a5:1a:42:7b:54:ed:f7:2d:8c:70:3c:5e:d8:e9:22:28:d3:
         2d:61:de:20:96:03:60:d2:d4:5d:e9:b1:c5:d0:30:c1:52:5c:
         d0:c5:2e:95:df:32:1c:cd:15:04:1c:b4:a2:f1:13:f4:53:b2:
         c4:e6:26:c0:e9:ef:ed:48:9f:16:ef:8e:97:8d:05:18:22:9a:
         2c:57:a5:aa:f0:68:7a:a7:c7:81:52:ca:5a:05:52:3d:ec:0a:
         fe:4e:c3:92:9d:1a:a7:c1:08:63:0f:4d:e4:e5:a7:13:75:74:
         14:45:b7:e8:0e:fe:6e:d4:e1:19:cb:b2:1c:65:c2:69:af:68:
         81:51:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----