Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File:                     fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier:          JbCw/4OyRo2535YD0tPCHAD31gIuxSmruBKj6l5vEAE=
Subject key identifier:   21:98:D2:16:23:A1:EA:35:93:0C:4E:81:FA:23:62:2A:33:57:8B:4D
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer:       /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial:       01962F07069D23621E2E7CC5448B5C7F3C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: HKWT9QIGkRrZ8dgpniK7nR4a4ypI17LYIw6ZU2etxwk=)
                          2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:9d:23:62:1e:2e:7c:c5:44:8b:5c:7f:3c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=2198d21623a1ea35930c4e81fa23622a33578b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:e8:ab:bc:a6:25:25:49:c6:c3:a1:29:af:
                    33:6e:ae:16:3a:13:56:90:99:1a:ae:83:ed:56:f2:
                    ab:df:09:4a:33:94:f0:1a:b4:ad:cd:9d:1d:96:47:
                    ca:bd:ac:cc:50:8d:f7:be:ae:6b:0f:3e:b2:f1:50:
                    da:0a:81:f4:3c:a9:2f:63:a7:8a:8b:e0:04:72:16:
                    83:8c:5f:ce:a7:f5:b2:dc:6a:35:a8:65:7c:f5:19:
                    7c:8b:6e:8c:63:04:55:a7:03:e8:83:26:02:d3:6f:
                    f9:d1:14:12:aa:62:6a:b9:e1:15:f2:f0:0b:fb:03:
                    22:39:83:b0:44:84:2c:cd:cc:b7:61:aa:8c:ad:fc:
                    94:26:96:53:e6:38:fb:33:c7:53:f1:be:36:e4:b9:
                    9d:d0:35:bc:13:56:0b:03:c0:63:1e:9d:b3:6e:10:
                    46:c6:5d:3d:66:cf:29:7c:72:99:dd:ed:af:76:2a:
                    91:21:fd:e9:39:36:2b:0e:5b:e8:9a:6b:1d:20:02:
                    2f:23:3e:40:e9:84:6f:e6:f0:98:70:fa:40:cf:68:
                    97:8b:a7:13:fd:88:b0:c7:82:26:63:f0:b2:10:6b:
                    8d:c5:b8:bf:47:58:30:53:ef:ce:f1:84:7d:1e:5d:
                    17:d6:bb:15:2f:a5:d2:41:f7:8e:14:3f:15:ee:53:
                    86:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:D2:16:23:A1:EA:35:93:0C:4E:81:FA:23:62:2A:33:57:8B:4D
            X509v3 Authority Key Identifier:
                keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:db:3c:9e:15:25:af:de:e8:1c:9f:ef:ac:79:49:f3:0d:
         e8:ba:bc:5a:d1:cf:25:fc:72:20:e6:21:51:c0:2a:7f:37:cb:
         25:9a:74:e4:16:90:ee:89:50:af:cd:03:ba:58:d3:fd:f1:7b:
         33:ed:71:9a:4f:92:39:21:b3:e7:fc:d7:e3:94:dd:9c:c1:70:
         03:bd:3c:29:ea:c4:7a:eb:c2:e9:dd:1c:ab:3f:88:19:b2:70:
         90:54:2e:26:47:21:f7:c7:f7:14:81:97:93:9b:b1:83:a1:d8:
         c2:ac:58:e5:ce:31:b3:96:f3:01:16:28:3c:08:96:0d:6f:bb:
         70:76:e1:1e:76:b4:58:20:05:e2:5f:6f:6c:b9:08:9b:22:df:
         bd:bb:ac:15:4c:80:57:46:1b:f6:ed:49:70:cb:81:61:08:7e:
         50:8b:8b:25:dc:28:43:f4:c9:83:4c:e3:9c:8c:5f:a2:66:d5:
         e5:03:b7:13:47:f8:59:51:0e:b6:62:fa:85:13:d0:e4:78:a2:
         03:75:bb:d0:84:2e:cb:31:7a:91:ea:98:42:e0:69:8a:37:18:
         ca:90:9b:39:51:65:74:af:30:b8:d7:32:d4:28:d1:35:4e:be:
         3b:76:3c:c3:61:f0:cc:30:48:d0:f1:cb:af:4b:8d:74:bb:fa:
         1c:3c:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----