Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File:                     _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier:          dBexRzI/vj6uvdY17vDX/fcqnJqwJjgdYhMlkXgl3kU=
Subject key identifier:   29:29:5C:A2:C3:FA:29:54:5F:10:9B:E5:AC:66:A3:9F:03:94:B2:94
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       01962DF39BBB34DBEBBCCD4E7125EB37980E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: mk1uZAhb/EOLKTwg8VPCJTQp/YorOLzIMYLOKDq0Lcw=)
                          2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9b:bb:34:db:eb:bc:cd:4e:71:25:eb:37:98:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=29295ca2c3fa29545f109be5ac66a39f0394b294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:08:cd:f9:f0:ca:a4:06:fc:3f:9e:0a:05:b3:
                    2e:74:ed:11:28:59:9e:d1:56:7a:ba:43:8a:0d:b5:
                    63:03:a4:c8:af:aa:d8:32:f4:1b:80:2e:94:7a:65:
                    4b:da:85:c2:b4:4e:49:a0:53:4a:3a:bd:9a:6a:d9:
                    2d:93:e2:df:18:d8:3a:45:2a:5f:b3:64:42:85:99:
                    b4:00:15:1e:dc:61:ca:e5:57:c0:55:7a:86:c1:f8:
                    be:2a:b4:38:fb:28:ba:e2:80:84:77:df:01:68:11:
                    6f:cc:55:04:0a:27:43:73:ba:c3:fb:84:c6:f5:35:
                    bc:b4:d6:3c:88:7e:24:a9:ce:2a:09:fa:fd:a6:a4:
                    d3:9e:f8:ea:e2:19:2b:fe:82:fa:7f:31:1d:79:68:
                    a1:3a:95:c1:a5:b6:95:9d:48:7b:56:8f:bc:28:fa:
                    0b:a1:55:55:e0:f1:ea:f2:d3:79:33:2f:c2:c4:e0:
                    19:8e:3d:ce:14:2b:aa:6d:4d:87:de:d3:a6:ec:6d:
                    54:92:31:f4:f1:56:6b:3c:0d:8b:aa:4a:e4:7b:72:
                    89:5f:ba:7a:69:d7:16:cb:1e:ad:8d:19:bd:20:af:
                    2a:0d:f1:5e:e8:a6:ab:2e:98:73:e4:08:b2:09:af:
                    d2:09:ba:05:80:99:b2:ae:5c:f8:87:98:0d:52:da:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:5C:A2:C3:FA:29:54:5F:10:9B:E5:AC:66:A3:9F:03:94:B2:94
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:f2:35:a1:f9:94:11:39:7d:c7:5f:a5:34:3c:14:a4:b6:
         cb:7f:02:82:d2:1a:d8:09:71:d5:8d:38:fe:ef:c6:99:ad:75:
         ae:63:cd:90:92:fc:ab:9d:7e:1d:f3:5c:64:95:37:57:26:88:
         e7:27:c6:ae:13:b3:61:71:94:3c:0c:b6:d0:13:de:de:9e:d8:
         11:c2:a9:ec:5f:e3:a3:7c:c7:95:38:b6:89:14:f2:b0:c3:01:
         31:cf:52:26:73:4d:04:aa:31:00:f7:a8:59:54:3d:a5:a8:3d:
         e9:ef:dc:9f:44:be:e4:28:aa:31:a1:27:26:06:4a:21:80:f0:
         a4:ad:09:15:88:40:de:0d:d4:8d:56:8c:54:96:d2:ef:3c:c2:
         8d:ed:d2:24:a1:85:40:71:a1:ce:3c:94:e3:f2:6a:ce:15:ba:
         95:ef:6e:5e:a1:65:1c:6d:72:12:e6:4c:2f:51:40:31:4d:7c:
         5f:66:d6:6f:ea:f3:d8:66:e6:ea:95:9d:b8:9a:3e:ac:6e:3a:
         93:d7:3b:62:c7:6f:82:32:88:81:0f:0c:7a:94:0e:79:d4:4c:
         5f:99:ef:23:4f:32:5b:6d:7b:51:f2:86:5e:7b:7b:f1:d0:e0:
         e6:51:bf:a6:be:56:48:09:9d:be:9d:85:87:86:ba:77:47:2f:
         6e:53:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----