Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File:                     fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier:          hdYAgRN0zgq+yRRPq7bNb+FKEbkDfhSRadJhZ7V4Ij0=
Subject key identifier:   53:0A:A0:58:7A:CF:A2:C5:7C:5D:B4:4F:1D:98:B3:F2:7F:B1:23:8F
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer:       /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial:       01962E2B23011415663364D63E7B3E0A7D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
                          2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: 7vVY643Fzw6Qyreliz68617AmMl2bCjEV826APnM6+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:23:01:14:15:66:33:64:d6:3e:7b:3e:0a:7d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=530aa0587acfa2c57c5db44f1d98b3f27fb1238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:0c:29:a1:0f:c7:f2:e7:86:d4:f6:f6:dd:
                    d6:df:5f:d7:ee:86:e3:fb:57:c1:62:71:21:ad:ec:
                    c6:a4:ba:9e:e6:eb:a9:e3:77:79:2d:7e:82:42:7a:
                    6e:5c:55:f5:39:98:1d:a1:fa:b2:c8:88:fb:30:0f:
                    90:ca:49:1d:c8:e1:68:ee:d5:9d:7c:48:61:78:d4:
                    66:ed:3a:0b:c9:c2:bd:e3:48:a8:1e:23:93:f9:de:
                    21:02:61:6b:09:7d:37:12:c1:6e:e3:9d:cf:15:4d:
                    b6:98:7b:27:a7:fb:2b:9d:49:7a:61:df:39:9e:e0:
                    ad:7e:ba:2f:4c:46:e7:f4:30:67:a2:03:65:60:ae:
                    b8:fa:5f:78:ee:7a:eb:da:1f:d7:8e:1c:ca:fc:18:
                    b5:23:7d:de:68:28:d6:63:ce:a7:82:58:d2:95:16:
                    41:ab:ac:b5:ae:6d:16:aa:6f:02:53:98:fc:ef:d2:
                    5e:56:0f:79:46:71:e0:0c:0c:68:29:86:8a:96:45:
                    c0:df:3c:6d:fc:22:d8:fe:0d:df:8e:b5:68:c2:84:
                    3d:ff:70:6d:d0:b1:8b:40:8a:dc:75:66:9f:05:74:
                    8c:b2:9a:88:58:99:0c:e3:a3:24:e1:1f:e9:0d:44:
                    a5:2b:9c:06:14:b8:4d:4b:47:ec:9d:14:73:a3:d6:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:A0:58:7A:CF:A2:C5:7C:5D:B4:4F:1D:98:B3:F2:7F:B1:23:8F
            X509v3 Authority Key Identifier:
                keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:c9:bc:6c:df:77:a6:c0:0d:ae:c6:46:e4:73:33:a4:86:
         6f:7e:29:d2:2d:a4:51:42:f0:85:69:e0:e8:13:6f:a1:8d:ba:
         c5:6f:ec:9d:33:a5:5e:26:60:d5:7d:1f:dd:02:5f:0c:30:72:
         8a:d4:38:ec:a0:e2:36:09:a6:44:74:68:f2:8a:c6:db:5d:73:
         d2:b3:53:2f:2a:bf:6d:f5:45:19:23:eb:fb:0d:fd:c6:78:df:
         d1:45:8c:07:77:04:ca:38:67:fe:8f:7f:89:23:77:1a:3c:14:
         0d:e8:d7:b1:87:95:5f:e3:9a:5e:3f:58:c0:8c:87:cc:96:50:
         6b:2d:86:d0:d9:f0:f8:21:0a:47:8d:f6:aa:ec:7e:55:7c:47:
         31:4f:52:41:d5:70:29:bb:2f:43:18:ac:a1:0c:d6:1a:d5:a0:
         1f:53:93:34:6a:12:95:fb:06:4e:42:72:97:04:b0:ff:cb:8d:
         61:26:46:fd:12:bc:fb:42:61:d0:66:04:97:8a:d6:8a:3f:b0:
         7c:29:30:54:74:1f:00:95:e2:5e:4a:7d:5c:16:46:8e:05:b1:
         1b:b9:77:89:09:38:a2:90:10:92:24:05:55:68:69:a2:cc:b4:
         d4:f2:9a:f3:5b:fb:bb:e7:39:16:22:63:88:6e:1f:b9:59:ab:
         5f:3b:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----