Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File:                     FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier:          CjvAIcE7JeEPPz9awAHkeftXoDnZn9RxiwEUw2eAafc=
Subject key identifier:   97:D1:A7:75:2F:CF:6A:31:5C:26:2B:50:06:F7:4C:E3:0D:EA:5F:82
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer:       /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial:       01962E98B9D0796A868EDC6D441313C6DC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: zXdW79hlfrL6UIfJrNn8qkXojA+9VwWHAqV8DfPnYmQ=)
                          2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
                          3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b9:d0:79:6a:86:8e:dc:6d:44:13:13:c6:dc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=97d1a7752fcf6a315c262b5006f74ce30dea5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:fe:45:62:7b:f3:7a:14:b6:79:e1:af:ee:
                    e1:9b:81:1f:d9:13:f4:60:df:47:37:6c:5f:33:8d:
                    28:02:32:27:a8:2b:89:d6:fb:6f:cc:b6:17:3e:6a:
                    64:2b:3b:34:51:9c:e3:5f:67:7d:cf:30:f3:d0:06:
                    a2:a0:8c:f0:0b:ec:1e:84:88:62:2c:df:bb:82:1e:
                    ad:35:f1:0e:e5:f1:02:8f:45:fa:6a:3c:52:23:65:
                    ab:39:9d:b6:0b:79:9b:42:63:c6:c0:99:f4:f6:85:
                    98:27:bb:62:7e:28:dd:69:6c:54:34:70:1f:3f:4f:
                    96:c8:f7:95:e0:88:6b:a5:05:d4:c8:ae:a9:66:e3:
                    9b:5b:8b:29:58:ee:11:79:1a:7e:00:dc:62:51:4b:
                    df:da:a2:24:a0:44:34:0a:c4:44:a0:6a:39:a8:cc:
                    6c:91:a8:92:a0:46:66:a2:da:10:e5:d2:0d:71:f4:
                    0b:3b:ca:d4:7e:95:d8:04:77:da:99:df:ec:b1:b1:
                    fd:75:47:97:3e:93:5b:8c:05:ab:5e:2f:94:5f:b6:
                    da:d9:c8:5f:14:b6:2e:e9:86:9d:04:f8:64:c1:d9:
                    48:dc:9f:90:5c:90:29:ee:8b:a4:f1:01:6e:e5:e1:
                    8b:c9:d8:37:a0:bb:dd:ae:53:ed:0e:8f:8c:b5:1d:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:A7:75:2F:CF:6A:31:5C:26:2B:50:06:F7:4C:E3:0D:EA:5F:82
            X509v3 Authority Key Identifier:
                keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:9f:66:61:99:1e:39:f0:3f:35:1c:1e:ea:08:73:0c:77:
         75:e5:65:f9:4b:c2:e1:f1:f6:b5:5c:9f:2c:87:00:e3:77:d5:
         75:0f:8e:9b:92:a1:ab:71:80:ae:57:86:71:f2:3f:b3:b2:ef:
         25:c3:a7:b6:e8:69:25:fc:48:a9:91:bc:a1:be:e5:08:da:7d:
         f0:4b:67:b6:88:b9:e5:46:28:1e:da:86:f5:e7:7a:83:60:7e:
         9c:27:a6:ea:41:6d:a9:aa:65:6e:e6:bd:d3:ba:22:47:6d:2f:
         c0:70:8a:b7:f8:3f:6b:8f:ca:f0:9e:8b:8a:c7:f7:85:71:9b:
         36:4f:08:eb:e2:13:5a:85:84:29:07:db:3e:31:db:61:17:9f:
         86:4b:25:86:a6:49:6f:9f:d8:a0:da:7c:36:1d:98:7e:63:90:
         48:a2:85:69:f3:b8:9f:b0:98:d7:b8:07:9d:53:48:a5:2b:3a:
         2d:70:c1:f2:5f:2f:a1:fb:a4:43:98:8a:0a:7b:f3:a6:7c:49:
         b0:81:84:46:11:ce:77:f7:b4:bc:77:92:d2:f0:30:8d:58:92:
         f4:d9:df:f6:c3:e3:3a:5b:0d:6a:ef:4e:29:bc:0a:d7:5e:44:
         f5:f6:07:ad:3d:5b:7d:d6:d1:ea:22:4c:bf:1c:05:00:c7:9c:
         5c:46:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----