Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File:                     1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier:          2zOxOYfHNLkVGtnpix+0dWdeaZJttwz6PknOQNshOXI=
Subject key identifier:   7C:AF:48:B5:E1:39:B2:E0:8D:4A:82:B2:AC:4F:59:A8:2D:9F:26:D5
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer:       /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial:       01962F0735D8A19D169136B066BCE5057E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: BT1mT9Ua/APxClmThSegJa7hnfWl7iGAjMmXaX659Gk=)
                          2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
                          3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:d8:a1:9d:16:91:36:b0:66:bc:e5:05:7e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=7caf48b5e139b2e08d4a82b2ac4f59a82d9f26d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:2f:e8:a1:54:70:a8:0c:d4:c9:b6:a8:b3:
                    d0:c1:a4:ac:bb:37:cd:4c:c4:18:d5:6f:fa:74:72:
                    00:0c:b9:5e:b1:98:4f:70:25:f8:d8:b2:66:72:75:
                    d3:22:e6:08:2c:46:44:73:ff:65:cf:ee:cd:d4:fe:
                    c9:ec:98:06:c0:08:4a:2c:ad:68:39:fd:29:72:3f:
                    e3:82:cd:6e:f3:4c:e9:9b:c0:9f:4b:ca:da:a2:72:
                    9e:80:0e:7c:3c:cb:2a:e3:75:ad:83:28:19:61:73:
                    15:25:8b:77:ef:30:f6:78:ed:ba:94:81:da:52:b0:
                    be:50:91:e2:ed:a4:15:f6:07:25:fd:bc:61:5f:4b:
                    5e:28:21:fb:53:6d:d2:2f:19:04:d1:87:a4:e5:6f:
                    2f:e9:b5:1d:c3:43:f4:be:5f:40:6a:a9:b2:b7:2c:
                    f1:23:c5:57:ec:86:42:6b:73:96:cb:79:86:a4:27:
                    86:3d:21:18:ea:39:b0:dd:76:a9:94:7c:8a:cd:f8:
                    40:05:82:6d:8e:bb:1e:14:e8:52:f3:a3:72:69:e0:
                    eb:91:dd:e4:fc:a5:ba:58:69:0b:36:7f:88:58:4d:
                    38:59:79:31:aa:78:6c:0d:86:80:fe:30:68:0c:ab:
                    3d:41:d1:03:c9:93:c8:82:f7:48:93:78:6d:67:58:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AF:48:B5:E1:39:B2:E0:8D:4A:82:B2:AC:4F:59:A8:2D:9F:26:D5
            X509v3 Authority Key Identifier:
                keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:e2:71:ab:a4:1f:d6:ed:d1:53:a6:be:0d:ab:97:75:2e:
         99:f2:c8:04:13:0d:c3:84:1b:c5:7d:32:9b:f4:1a:ef:44:fa:
         02:ba:de:ad:89:f6:4f:fd:27:2d:f8:72:ae:08:48:7f:71:c8:
         1e:06:ad:ee:22:d7:69:80:71:95:c9:7d:57:84:45:ef:ba:d1:
         a7:ad:7e:02:21:b7:54:cb:bb:78:37:7c:84:71:c0:75:49:5e:
         78:e4:6e:7a:7d:54:32:8c:d8:d1:7b:79:15:4f:48:73:71:ae:
         c4:b7:e6:ee:44:c7:9e:85:78:34:49:0e:95:30:20:d3:4e:35:
         01:bf:f1:08:b6:9a:d4:85:f2:ad:6c:f5:5c:16:11:37:ad:0a:
         19:6a:60:74:a5:59:13:a9:5d:b6:ef:0d:7f:b8:e5:b5:98:ce:
         73:17:00:02:4f:98:c3:60:8c:b7:b7:3e:9a:ba:3d:7d:30:98:
         51:2a:fa:d5:e6:6c:37:df:a0:33:5d:8f:90:a8:ba:ef:80:62:
         be:34:7e:b2:38:cf:a2:f2:bb:a4:3c:62:4c:19:08:01:6d:5e:
         d3:e2:a0:d9:52:03:14:61:84:74:8b:67:bf:30:b8:fb:8b:38:
         1f:f3:19:88:0c:5b:0f:da:12:21:80:eb:46:c2:d8:88:c5:bc:
         d8:e0:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----