Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File:                     48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier:          g1k8UyQbZXcVyH9qlyvmkLJvuGPWCkCOA2c6LufZ4Jw=
Subject key identifier:   B7:0E:71:F9:8C:3D:01:2D:33:08:DD:4A:9E:F6:62:2F:CE:FD:F6:9F
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer:       /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial:       01962E98D594B84780E659E3BF452DD38693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: /6h04NC0JDEZMYlHDXsFKjmG9oUUV7Q+xLmmTi5fmb0=)
                          2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:94:b8:47:80:e6:59:e3:bf:45:2d:d3:86:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=b70e71f98c3d012d3308dd4a9ef6622fcefdf69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:c0:82:45:ba:e9:9c:eb:d4:32:83:58:6a:
                    e1:d1:23:1f:3c:46:ac:6a:b3:dd:c0:e5:31:01:3f:
                    27:49:71:67:3a:25:58:75:dd:2b:90:9c:f3:db:1f:
                    c5:db:18:43:c7:85:13:e0:81:80:b6:37:8f:be:7e:
                    87:17:24:af:4e:58:25:0c:29:b3:5c:5b:03:0b:54:
                    59:b1:dd:25:76:52:0c:57:b5:ce:49:ba:1e:34:8f:
                    a8:58:4b:c0:98:6e:21:c6:92:6a:c6:6f:1e:03:16:
                    b7:6c:d7:f9:5b:15:86:f6:3c:e8:27:d8:d9:e5:9d:
                    40:92:60:2c:87:7a:92:77:0c:e9:db:d6:12:ef:73:
                    de:32:90:2f:4f:b9:33:e4:9a:a5:26:7e:8c:82:0c:
                    4c:c6:fa:37:84:b3:a3:6c:02:45:34:29:65:29:ed:
                    33:fb:f5:f6:21:0d:10:a9:b9:73:fe:3a:23:ca:84:
                    21:99:68:5d:6e:c9:5a:cb:73:42:51:c8:5e:c5:79:
                    bd:40:4a:86:4d:a9:07:ec:7c:87:68:7a:b5:8c:da:
                    c5:e7:4b:9c:a2:70:c3:04:20:26:70:59:69:fe:b6:
                    f3:8f:53:55:54:68:df:ad:fc:87:d6:d5:af:59:47:
                    76:c9:3d:31:fa:68:d6:91:38:8d:74:9d:fd:0b:99:
                    4c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0E:71:F9:8C:3D:01:2D:33:08:DD:4A:9E:F6:62:2F:CE:FD:F6:9F
            X509v3 Authority Key Identifier:
                keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:c4:40:50:58:6e:7d:a1:da:c7:2f:07:85:75:de:11:6e:
         61:cd:ac:23:fe:fe:9f:64:78:33:00:9b:7e:fb:c6:04:39:8d:
         92:ad:96:fb:c7:7a:b2:ef:ed:85:a2:e3:e1:01:cb:30:08:1c:
         05:50:3d:54:0c:52:7f:d5:b8:90:87:5a:c7:8e:9e:ad:0b:b4:
         68:6a:a1:ad:6b:67:75:78:31:89:78:c3:7b:a3:28:71:2e:4d:
         bd:b7:2d:c7:e4:9a:7f:f3:ff:fd:84:da:03:4f:bb:72:68:00:
         1f:7c:fa:05:65:aa:60:35:34:cc:12:f7:54:65:95:02:8b:be:
         c4:20:22:6a:fe:bb:58:44:65:ca:b7:38:de:b7:c1:4c:35:06:
         8a:46:b6:49:e9:cd:0e:dc:ac:c7:fc:bd:2d:b5:4a:2f:6e:d7:
         42:4c:d3:2e:10:34:79:71:50:c0:02:fa:ee:0c:82:3b:9b:65:
         e3:f0:88:3c:32:5e:27:fd:6b:22:ff:8e:65:9b:15:b9:f7:b8:
         97:57:58:96:3f:ad:c6:de:b8:fa:1d:e5:85:00:e4:f2:7a:c9:
         9f:08:4a:6d:9e:40:cd:6e:23:2d:d4:ca:8b:4d:7b:e6:99:3a:
         10:69:d4:ec:37:34:3e:33:b3:8c:93:6d:0b:7d:2d:1f:26:3d:
         be:41:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----