Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          2xhBjrVHp4VzNjVAD6HQ1PyEJ6HXDwNWEQNtnaOl+nw=
Subject key identifier:   2E:3E:36:4C:A3:1C:51:AF:61:3A:FF:F1:48:48:10:BA:A6:5A:75:24
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       01962F3D4614C880F21158F275693A21E1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: NZOnFCc0x3t9gPQ2zAgsYqXDcIH1hQpVKRTViaJqHFQ=)
                          2: N5Gh8WU6LbeHtUd8XRyhLT7tdkQ.roa (hash: mitxt5I+lSF+4rUo8JMUQCIfsBb/PVUX3ZvyGSCEfWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:14:c8:80:f2:11:58:f2:75:69:3a:21:e1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=2e3e364ca31c51af613afff1484810baa65a7524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:79:70:5a:1e:4f:b9:58:ac:ad:da:ee:7d:
                    6b:64:1e:9d:5e:61:65:ac:4f:34:0a:5e:62:bc:b5:
                    3e:bb:54:fa:12:d5:04:05:b9:07:9d:f6:66:89:ad:
                    b0:b3:02:58:a3:f0:11:c7:18:df:ac:29:51:1b:9f:
                    a8:ca:bf:6f:8b:9f:8a:c4:ea:2d:db:d9:e2:20:fa:
                    04:38:9b:41:c1:f2:d6:d2:3e:14:3e:db:5d:01:25:
                    d3:29:72:4e:0c:d6:0f:5e:8b:47:b8:86:8a:3e:c7:
                    08:a6:2a:01:b5:2a:98:f4:12:29:05:91:24:a6:03:
                    bb:f8:51:00:f0:53:59:1d:ad:cf:fc:b9:8f:bb:53:
                    0c:80:19:c0:72:ff:6c:94:da:66:fd:72:93:c7:41:
                    25:24:4d:d2:7c:e7:c6:c6:d6:43:b2:d6:89:71:eb:
                    93:c4:1a:65:42:2d:25:35:19:bb:5d:63:f7:ec:22:
                    a4:d8:67:b9:7a:99:28:43:3b:5c:20:1f:32:25:a9:
                    63:73:0c:f0:35:0d:7a:bf:eb:cd:45:8f:c6:f5:3d:
                    70:52:d8:7c:11:11:50:c8:da:a6:bf:45:f0:45:24:
                    8c:bf:5a:2b:9d:d7:4f:88:02:1e:2d:5e:8a:ab:1a:
                    65:75:8d:2d:cd:c7:3d:89:54:a6:9a:b9:ff:11:41:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3E:36:4C:A3:1C:51:AF:61:3A:FF:F1:48:48:10:BA:A6:5A:75:24
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:10:86:42:10:d5:79:25:1d:f4:be:7d:63:54:39:43:1a:
         15:d3:34:24:71:50:20:c1:d0:f4:80:c5:b8:8d:ad:3b:cc:12:
         f5:ba:54:e9:26:3a:f1:84:96:88:4c:1f:4c:c3:d9:17:92:59:
         34:47:58:e1:17:ec:d6:27:43:1f:6a:2b:67:c7:c4:01:01:1b:
         7d:06:3b:18:aa:49:a3:c1:ef:4a:86:0c:ce:ba:a8:5a:be:4a:
         38:ac:89:d4:8d:8a:fe:6b:73:d4:66:88:03:e8:51:95:50:97:
         7c:0e:4c:b5:c8:e4:56:1a:a7:48:1c:62:4b:97:e3:42:bf:3c:
         7e:98:09:8e:61:22:17:0c:c1:39:72:1d:58:3b:b0:8c:94:03:
         a8:6e:6d:2c:58:df:2f:b8:34:04:1b:30:3f:32:e5:08:a0:7a:
         bc:c2:f4:b0:39:dc:d2:11:a1:96:85:b6:d1:28:eb:9c:ec:42:
         c3:72:5d:e6:b7:0d:7e:8e:03:67:35:c6:58:85:86:94:e9:d7:
         17:34:cc:6c:ad:f4:f5:91:a7:8d:50:03:8d:b8:a3:3b:ec:52:
         d1:d7:7e:8c:52:9a:c3:d3:4b:d3:67:a6:5c:62:21:e4:a5:fd:
         dd:e7:41:e1:5c:ca:b3:35:53:f2:ec:58:dc:87:a7:00:ab:18:
         ce:a4:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----