Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          2l21VEiJ7F2xXEEGRdndrOCRha1U7yK4l7dWXu5Hn0k=
Subject key identifier:   E6:49:30:09:25:AA:6C:4B:E0:0B:B1:3E:30:7D:15:90:A9:81:1D:5C
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       01962FABACD4B236E269B25DFD1CC0ABA9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:42 +0000
Files and hashes:         1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: nSMmNXqbsCYYnmE/ZYEfUyc3/LzMWRvEnegAdkHPGjM=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:ac:d4:b2:36:e2:69:b2:5d:fd:1c:c0:ab:a9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Apr 13 15:01:42 2025 GMT
            Not After : Apr 14 15:01:42 2025 GMT
        Subject: CN=e649300925aa6c4be00bb13e307d1590a9811d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:b6:9f:6e:49:6b:62:db:e3:8e:57:d4:85:
                    a3:21:7d:fc:0f:da:d7:b3:8b:15:9e:3c:8d:04:99:
                    f0:a1:55:20:aa:c4:fc:08:30:61:f9:b4:0a:7f:47:
                    73:6d:54:76:2d:2c:d5:1a:60:e1:24:c0:f4:9c:67:
                    1d:cc:90:12:75:48:58:36:bb:80:41:d6:69:11:1e:
                    da:6a:f7:7e:e6:73:f1:47:fd:aa:ce:c1:01:de:60:
                    22:eb:d3:15:a0:0f:3b:54:6d:a5:7f:19:c1:aa:19:
                    9c:d9:a7:a8:b4:ad:c5:43:94:71:ff:d9:0d:45:6a:
                    e8:ce:ff:6d:aa:9e:ae:b9:6c:3e:51:2d:84:1c:f5:
                    dc:54:f3:93:3c:e1:52:53:80:0e:23:7b:ed:71:4b:
                    f3:42:09:d2:f2:65:69:3e:b2:4d:ab:99:92:eb:13:
                    c0:c7:cc:0a:04:9f:b6:db:5a:d5:4a:d1:4c:aa:a5:
                    91:ea:dc:d1:22:8f:27:7b:fb:87:14:b3:8e:6d:9c:
                    bb:07:3e:7f:85:fb:88:82:04:12:85:3c:c9:4f:4a:
                    60:e0:ce:7f:f1:b4:c5:e4:29:f0:dd:2c:dc:bd:2a:
                    96:c6:d0:5c:dd:e4:85:60:c2:7c:03:93:d6:76:1e:
                    1b:46:91:0d:ee:36:73:08:dc:4b:f5:bf:4b:7d:d5:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:30:09:25:AA:6C:4B:E0:0B:B1:3E:30:7D:15:90:A9:81:1D:5C
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6e:0c:46:b7:30:7e:22:a1:a5:e5:8a:fe:7c:b3:93:01:75:
         64:19:fe:1a:14:91:d7:e4:b0:45:30:b5:59:59:53:0c:59:1c:
         31:67:84:37:b7:f2:dd:57:8c:df:59:c0:f7:76:6d:4d:5c:2e:
         31:4d:2c:8a:a4:c4:d6:26:5e:fc:10:ec:52:a1:81:d1:9e:3f:
         48:f5:43:89:b7:c8:80:c7:c9:5f:5d:65:23:3f:73:18:a4:18:
         65:8c:06:60:2c:e1:97:37:61:63:ec:33:f6:f4:78:99:f7:e9:
         af:f2:60:42:9f:6a:d9:9c:ff:f1:bb:16:f3:ca:49:60:d3:b1:
         5c:9d:de:12:41:fd:78:d0:e5:be:f7:ab:b8:60:75:ce:a0:a5:
         38:17:34:d2:6d:1c:4a:59:6f:27:21:6a:7f:82:e8:09:2c:33:
         42:e2:59:a8:b8:a7:6f:bd:96:95:5f:78:fe:11:4f:3a:e4:db:
         83:3f:63:78:ac:3e:97:a6:9e:7b:2d:a4:1b:85:ab:5f:0e:fc:
         e7:0e:e6:71:bb:87:62:6c:b6:db:65:f2:d7:ae:2a:e9:98:85:
         32:6c:82:2e:82:2d:86:8c:2f:81:4b:49:e9:f8:96:e0:62:63:
         54:c6:49:00:1d:7b:14:2d:35:c2:b7:02:a9:47:94:fb:5a:9b:
         0a:b3:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----