Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File:                     1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier:          q1xjzu/6DjFU4yPHAtxqoTOg42VUlnMYJ/6Rlf6GqRU=
Subject key identifier:   D7:88:E8:7C:F9:76:95:07:62:06:90:CD:8A:5E:66:FB:8F:E4:3B:07
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer:       /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial:       01962E996F6607C96E4FBFBE6850932E008C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: nUJpmH8nFW0MRfytk5XYQ6lF0kkqAt5k4QqmbGRaD2k=)
                          2: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
                          3: tLS4xU-vtXZpX37sjW7SyqQqQ0M.roa (hash: Eq8qKDr4X5oijarNEC8B7aqyt4IhqQ1MlTcTqvRwOtk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6f:66:07:c9:6e:4f:bf:be:68:50:93:2e:00:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=d788e87cf9769507620690cd8a5e66fb8fe43b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:0d:d6:19:01:a2:e4:e5:f5:63:45:a4:87:
                    a6:f2:90:c4:b4:8d:99:16:fa:c7:8d:50:b1:74:a7:
                    16:09:ae:b4:e5:d5:43:b6:36:17:e6:dc:d1:d8:f8:
                    97:32:23:b5:72:eb:a5:98:48:19:ed:61:fe:5e:0d:
                    b4:ac:05:55:04:24:34:5d:81:86:a3:3f:9f:e2:04:
                    8c:f0:a4:8d:97:a2:89:55:92:89:f6:0a:5b:26:e1:
                    83:48:b5:ff:49:cf:fa:60:df:76:5d:4b:f3:02:e5:
                    f1:ef:30:6d:70:63:00:f1:e6:cc:81:80:59:00:04:
                    7c:5d:eb:92:56:31:49:70:27:a0:70:9c:6f:d8:73:
                    ab:3c:9e:9f:5e:4f:2c:3d:a6:00:d4:19:eb:07:2d:
                    1c:21:7b:90:06:be:30:63:89:46:dc:54:bf:82:d6:
                    e1:31:ea:64:78:1d:17:14:53:15:92:46:7f:b3:fe:
                    34:98:ef:ef:bd:91:44:09:9e:ac:4f:8e:03:9d:97:
                    c0:4a:ed:fc:26:d4:b9:0d:d2:fc:b9:ef:f7:20:ca:
                    f5:d3:5b:d7:62:e7:08:09:f3:d0:e8:02:a6:60:29:
                    52:c4:47:33:d8:cf:19:96:86:69:0d:0f:a8:d0:b3:
                    5d:94:b1:13:e5:07:be:87:6d:6a:c5:d0:fb:df:a6:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:E8:7C:F9:76:95:07:62:06:90:CD:8A:5E:66:FB:8F:E4:3B:07
            X509v3 Authority Key Identifier:
                keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:b9:94:0f:ec:29:a0:89:77:89:3e:32:bd:52:87:8a:a5:
         56:03:39:ce:d2:1b:a2:5b:f5:d6:ba:a5:f2:1a:02:72:78:49:
         c7:00:d3:68:2d:45:5b:a8:25:38:30:cc:b3:2c:bf:5a:04:bd:
         99:61:2a:2e:6d:73:07:a5:0e:ac:6f:21:b5:83:af:16:e3:a1:
         44:44:d7:b3:7f:9a:8f:97:3f:b2:3d:83:d6:5e:08:7b:bc:09:
         9f:0a:a0:17:f4:14:43:ea:76:aa:ef:2c:05:f5:17:01:50:e3:
         b7:87:1d:61:2f:45:c5:b5:97:2c:c1:a5:8e:85:70:ea:d1:0b:
         f5:a4:bd:88:01:8e:7c:1e:4c:b8:76:27:0e:fa:1a:fe:9f:96:
         71:1a:ad:63:5f:43:22:2b:e2:96:64:44:88:4b:21:8e:ad:6e:
         93:b2:ad:6f:e0:f7:d1:b1:b0:3d:d6:2e:f0:24:e9:e2:84:a6:
         99:a7:6a:cc:f3:84:0f:68:2b:75:14:74:23:66:02:12:58:ac:
         78:2c:a4:f1:3b:65:78:df:c0:84:01:5b:cf:3e:fb:8a:06:a2:
         e9:ce:5f:4e:d7:3e:84:c0:f5:1e:78:86:df:0c:39:07:39:28:
         f4:88:23:75:26:9a:73:c3:25:04:f9:76:c0:3b:ef:f2:ff:f1:
         c5:3f:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----