Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          9JbWwC5+yXkd9bU7vR+9VGo3xUYTQiPZFsz7Ih1PwSo=
Subject key identifier:   00:6B:4F:80:20:63:D5:97:05:99:2E:1A:50:D7:E4:7A:44:05:65:39
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       01962DF3A411CD21E58E116BF5A5AE3936B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 0_4kPqijH_S1Eq86-B5t4Qptkkc.roa (hash: monnJnatCyTOeVv1VvBMMHzgkVsFi5krNSX8ZQ1sFsY=)
                          2: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: IP1e0mfm2qlr0aQmfMiu86ufaTm6HuL4pdYXNonVB00=)
                          3: F4UI4ybOifBfn-xOfyHAde2Mj9c.roa (hash: 0PCH6BF7/3q43D682K2lKa/7ZVqoTmH59+HT5oGtsRc=)
                          4: WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa (hash: 3lu/ayfZLYDj8vnQ7f7Xh2AT2XdViQ0lLouzSMEvwU0=)
                          5: _PqP39FzftfO-7VLMM2dmTLrMcs.roa (hash: CJ+28nkgf4oNGdqZSE90eYJxAT+csrK+YiNrA00VE1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:11:cd:21:e5:8e:11:6b:f5:a5:ae:39:36:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=006b4f802063d59705992e1a50d7e47a44056539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:e5:6f:bb:af:3e:67:0d:0e:c8:80:98:ba:
                    cc:7d:4f:79:21:36:bf:1b:ab:9f:ab:fa:64:90:c5:
                    b4:d7:7b:f2:18:8b:d3:c4:5f:33:8b:9b:83:db:1c:
                    e3:02:5c:5f:28:1d:9f:a6:b0:fe:8e:4b:14:ee:b9:
                    f5:d1:b3:71:f4:d8:00:b5:34:6c:62:11:75:a2:0d:
                    ca:e6:6e:6b:27:01:76:dd:7a:42:0d:ac:d2:54:3b:
                    02:e3:48:a8:18:cf:ae:3b:36:0e:40:1f:a5:53:6c:
                    df:c5:89:67:51:52:91:00:af:8d:cb:b4:0d:9d:9f:
                    65:e6:9b:d6:a1:9e:9f:b6:4e:fb:cf:fb:f8:9f:28:
                    e6:1b:f6:cb:89:51:b8:4a:9b:08:cc:32:21:1f:ca:
                    36:7a:e3:4d:68:b8:e9:aa:e9:14:98:d5:00:10:a1:
                    b9:a7:6e:61:ea:81:ba:65:9b:80:b0:16:c6:00:31:
                    b5:78:17:b3:5b:4e:4c:e5:0a:50:c9:1c:7a:77:3d:
                    5b:2a:9a:cd:92:4b:69:38:5e:d1:43:fb:a5:49:0b:
                    56:7e:ab:68:98:5b:ba:d2:0f:d6:cf:00:90:d7:f1:
                    25:39:39:06:e3:62:c1:7e:18:b5:46:b5:86:32:2f:
                    e6:dd:37:54:e9:3b:7b:1b:4a:09:83:eb:54:8c:46:
                    72:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6B:4F:80:20:63:D5:97:05:99:2E:1A:50:D7:E4:7A:44:05:65:39
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5e:41:48:40:7c:aa:ce:dd:17:3e:33:13:17:44:96:d8:08:
         53:57:c9:70:d5:b0:6a:62:f5:a0:df:fd:25:44:b0:f7:7b:8f:
         66:48:9b:3c:40:2a:05:a6:ca:41:59:e7:55:3b:09:05:41:94:
         b5:d8:a7:57:03:44:87:80:5e:48:e7:68:cf:71:0a:2c:24:39:
         f3:65:3d:96:09:62:f4:9b:68:f9:7e:ba:bf:5e:7c:4e:20:18:
         f5:ce:0a:0a:ff:67:9a:88:84:0e:5f:3d:ff:b7:0b:ef:3c:44:
         68:64:aa:05:21:71:b2:5a:c9:3e:d1:8c:fe:ae:41:96:76:d3:
         7e:57:1c:a4:51:4d:dd:d1:ad:2f:1a:95:47:96:8d:a5:bf:3f:
         79:02:de:c4:fb:8c:28:16:48:84:44:4b:d4:90:0a:bd:ff:ed:
         6e:7a:f9:52:d1:f3:68:56:77:77:2c:7e:e5:02:5c:83:c5:8e:
         61:7f:9b:d9:6f:c5:32:ee:9c:eb:ce:e9:12:aa:13:29:91:5c:
         c5:e4:b4:c3:a7:af:55:da:e3:88:fe:9a:a5:02:41:19:9f:11:
         a2:26:56:43:f8:99:40:2d:3f:51:73:21:3f:3b:9c:ed:6f:d5:
         c2:0e:3e:44:d4:16:6d:c9:b4:29:96:c3:65:2e:c1:e0:02:f3:
         de:5f:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----