Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File:                     _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier:          0q06BrPOFgHqBOOWZ+c1VH8eTbZKI7ceuZVAOBviSFI=
Subject key identifier:   3F:8F:80:02:8A:12:58:D5:67:8A:84:45:D4:8D:92:A9:F7:5A:45:01
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer:       /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial:       01962F74F436F97C7ABA5535E51C99F8EE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
                          2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: 6WSIgIrPNVky7M1lflaYzx5WZlpE4RK3ltd1MU+pcSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f4:36:f9:7c:7a:ba:55:35:e5:1c:99:f8:ee:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=3f8f80028a1258d5678a8445d48d92a9f75a4501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:40:6b:39:c5:b3:5e:b6:22:a2:cb:a9:20:
                    dd:7a:75:a6:43:fd:1c:e9:bd:51:63:25:90:4c:10:
                    49:25:e4:71:d4:ed:a4:aa:7f:61:16:45:29:35:d9:
                    74:33:48:ea:d1:40:b4:1c:1b:03:ac:46:d7:ed:34:
                    8a:93:81:55:c9:a1:f4:ca:02:db:c6:3c:b5:d3:72:
                    b6:5f:38:c5:3e:a0:39:65:b4:97:21:a8:7a:32:6b:
                    98:00:5e:5c:1a:59:9a:ba:db:7b:3f:70:18:58:3c:
                    e0:75:d7:88:a9:0a:7f:00:74:4a:8c:40:5c:ab:e8:
                    35:ce:d8:d3:1b:88:99:3f:3a:c9:55:99:7d:66:5e:
                    99:2c:ff:ef:24:b1:35:e3:65:a4:c7:9a:39:e3:d4:
                    2f:79:91:f0:6b:20:92:72:b0:df:cc:09:b7:3e:a3:
                    f2:e8:93:20:a6:74:3d:68:7c:2d:52:9a:10:10:70:
                    d6:4c:0c:30:5f:b0:fa:bb:fe:de:88:9d:d3:73:e2:
                    a3:8a:68:2d:b3:1c:da:38:92:82:e5:a0:9c:d7:99:
                    eb:4f:0a:2e:88:c0:49:44:b4:52:cb:9e:07:5f:7a:
                    bd:14:09:01:8e:86:af:3a:71:c7:85:e0:c2:5a:00:
                    51:f4:9a:c0:ef:11:cf:e2:1d:55:cb:89:32:cb:66:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:80:02:8A:12:58:D5:67:8A:84:45:D4:8D:92:A9:F7:5A:45:01
            X509v3 Authority Key Identifier:
                keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:94:91:ac:74:66:4f:56:2a:6d:7c:35:37:64:8c:5e:80:8b:
         75:8d:3f:83:06:64:f4:ad:01:6a:52:aa:59:ed:06:5d:c8:ef:
         86:c5:c5:f6:0d:56:a0:67:d7:ae:06:b1:df:df:2b:7a:d1:f1:
         30:00:2c:7c:91:1a:d5:d7:b2:4f:db:cb:b0:b1:28:50:cd:f1:
         8f:39:88:5f:67:be:6f:29:b0:70:dd:a0:f9:a0:1e:86:99:63:
         ba:6d:e6:27:6a:6a:8c:bf:cc:f1:19:7d:5e:7f:c0:4f:30:16:
         21:67:a8:d5:d5:3d:c5:57:5f:60:53:f1:80:19:63:23:ab:ef:
         3e:99:98:d1:f3:ac:9d:33:23:51:e0:1f:fd:30:31:4c:ef:30:
         59:9c:da:2f:8e:78:c5:5d:0f:db:43:49:0b:e6:e2:20:d5:27:
         ba:18:09:33:8e:4c:fa:09:c6:e2:df:2d:88:4b:09:10:cd:8c:
         83:8c:61:43:37:cd:54:be:78:21:ec:26:c1:7c:2e:12:17:c7:
         d7:93:28:5c:a7:5c:d8:70:71:b2:8a:fd:7f:0f:96:31:fe:d9:
         60:81:3d:e4:76:6c:1e:cb:f3:c6:33:e5:de:96:8c:4c:ea:8e:
         57:f8:69:e6:08:15:d9:fd:07:3a:1a:45:ce:db:57:65:19:89:
         8d:f5:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----