Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
File:                     _Jvk7U5UtgHmtqQtC6BM-3qyw78.mft (raw, json)
Hash identifier:          q6BC9V4iNTd+hBb9yrJxsbYm0udum6JkLchCCHFZDBc=
Subject key identifier:   8C:22:4F:A6:F3:E4:09:BD:57:40:F4:4A:B4:69:4F:84:7A:CB:94:11
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Certificate issuer:       /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial:       01962F74DA3B2960D312945D23B54C0771B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: UT4NXn4ZcTkJwvgQgl9dQtMGQHY.roa (hash: nylFSQWGan1W87gYguk9ri6Ziw1VxhwDfj3K/sUzuCM=)
                          2: YrzvUNT5M4hj46aUuOCmh4XVM5A.roa (hash: rUaB6yYaD6EfXVc/GJmri33jh5n71ZBoGI/gA7B8G6I=)
                          3: _Jvk7U5UtgHmtqQtC6BM-3qyw78.crl (hash: srP9mxMc4olYHljeJhrxte4CltY7Tc+q3R3bPklXAoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:da:3b:29:60:d3:12:94:5d:23:b5:4c:07:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=8c224fa6f3e409bd5740f44ab4694f847acb9411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:a2:7f:18:6c:18:fa:62:87:10:2a:2c:20:
                    57:0f:14:4f:3d:a1:24:ac:f3:38:86:97:9a:5b:3e:
                    21:a0:bf:ad:e0:76:7c:0f:9c:ed:30:4f:bd:ea:00:
                    95:6c:f5:e8:f2:33:de:5b:ac:78:df:cc:80:f4:9f:
                    59:c4:5c:a6:68:a5:51:f7:ac:d4:1e:ce:e0:49:12:
                    93:e2:46:8d:f6:ba:ab:43:b6:cb:88:81:18:6f:0a:
                    2c:cc:ae:0d:10:4e:56:e0:58:f6:af:08:e7:a1:54:
                    8e:55:4f:3e:5d:51:32:42:00:2e:3d:77:e2:19:68:
                    44:da:f2:5b:00:bf:e1:81:20:23:46:85:f7:40:23:
                    c0:c9:17:de:a6:59:6c:db:c6:1d:fd:01:8d:57:30:
                    f5:c2:89:3f:a0:dc:20:e9:bb:5c:dd:5d:33:3c:8d:
                    70:ce:10:eb:d5:0b:a8:5b:97:b7:fb:ae:d4:e2:f4:
                    7e:75:70:8f:4f:28:c7:1e:0b:f5:68:9d:b3:78:1d:
                    af:8f:37:8a:00:dc:09:a5:94:6b:2a:62:e3:f6:1b:
                    54:65:63:a5:b8:c1:6e:9a:56:7e:ad:ae:f3:68:1a:
                    75:3d:39:2f:f7:f6:46:44:36:fd:d1:67:fb:98:a8:
                    45:ef:ab:75:75:e9:ee:74:21:63:b8:3f:c0:84:dd:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:4F:A6:F3:E4:09:BD:57:40:F4:4A:B4:69:4F:84:7A:CB:94:11
            X509v3 Authority Key Identifier:
                keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:64:de:bb:7f:ab:b4:d7:2f:04:18:d6:c5:da:4e:d9:d5:
         e5:0d:10:f2:b4:8b:94:40:d8:45:8b:84:5d:95:09:77:d3:bd:
         ac:7a:ab:11:73:50:9a:47:19:3d:72:01:98:c7:fc:c5:17:cd:
         ef:88:ec:cc:7e:09:4c:fe:0b:d2:e2:8f:b0:82:55:a7:56:35:
         56:5e:01:4e:f3:3f:be:36:b0:ca:2b:0a:45:55:eb:b8:18:48:
         ce:61:6a:4d:7f:4d:33:4c:e4:75:f2:a3:e7:39:2b:44:bb:b0:
         91:38:66:2a:2b:a3:e0:0a:d6:2b:1d:f4:40:30:d1:82:11:2c:
         38:db:2c:c3:6a:05:7d:6f:92:0a:fc:f6:4b:70:41:38:f5:b7:
         69:9b:9a:4c:a5:1c:33:89:f1:d6:b4:bb:04:7b:c2:cd:62:32:
         d4:b1:cd:b5:ce:32:84:fd:10:d4:dc:79:3f:99:b9:38:bb:8e:
         9e:39:79:c8:67:d0:0a:4e:83:0a:71:0e:1d:72:12:31:2a:32:
         07:f5:46:7d:d9:fd:a0:64:ad:7b:f1:12:6e:03:49:c7:55:fa:
         8c:e3:3e:7a:5f:38:6d:67:65:df:c8:98:de:5e:82:66:c9:91:
         2b:a1:be:3a:b2:af:04:d9:30:d3:1e:f9:0a:80:30:72:86:4f:
         de:3e:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----