Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File:                     _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier:          cNdSImgxybNMS7ILa5w4cNA/Xy65VPTJtrHXIIlFDZA=
Subject key identifier:   F3:01:38:89:FD:4D:74:E7:47:2A:25:CC:DA:4E:F6:13:08:20:37:57
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer:       /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial:       01962E2ABE94E8A8643C92CCDFC82CA55C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
                          2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: fUPXcF+Du3lQ8B0We8aiVld3n91jygpo6Otl/Ue2CbA=)
                          3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:be:94:e8:a8:64:3c:92:cc:df:c8:2c:a5:5c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=f3013889fd4d74e7472a25ccda4ef61308203757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:21:36:c7:53:8b:21:99:1f:e9:af:7b:44:
                    e4:60:8f:9c:60:40:6b:f8:ff:cd:2b:60:9e:26:d6:
                    19:f5:ca:02:e9:9e:09:63:71:bf:a9:c3:79:e5:54:
                    9d:13:ad:65:b8:db:19:f5:e8:1b:0e:55:d4:41:be:
                    96:66:2b:2c:44:48:e8:16:5f:6f:e6:3e:59:8c:d7:
                    01:41:4f:f6:e4:15:9d:0c:72:b1:b4:5a:2c:08:a8:
                    02:91:57:be:e5:0c:bd:54:9e:31:2a:e5:67:8b:b1:
                    61:2d:10:f3:5e:8e:d4:8f:6b:59:91:4a:8d:e1:72:
                    62:5a:77:10:2f:79:4c:ad:03:a5:ff:1f:e9:14:f1:
                    6d:0f:70:b7:7f:1f:a3:d1:57:54:5f:c3:55:75:70:
                    c1:d1:3b:6d:55:39:44:c9:3f:3f:78:15:92:db:ed:
                    aa:68:8d:9f:8e:e7:44:fb:35:bf:a1:51:04:52:ea:
                    c6:ee:13:2a:23:5d:5f:e2:7b:04:e4:ce:79:d7:53:
                    c4:28:c0:81:1e:1d:1d:1e:bf:23:fc:db:36:da:f6:
                    89:0e:16:31:0f:0b:f4:08:18:cd:b4:ff:ed:43:b8:
                    5f:0c:33:96:1d:d0:be:71:e7:7f:12:df:1d:43:dd:
                    00:dd:fa:f0:f2:8f:f3:fa:d8:28:e1:8c:4e:7e:5a:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:38:89:FD:4D:74:E7:47:2A:25:CC:DA:4E:F6:13:08:20:37:57
            X509v3 Authority Key Identifier:
                keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:b5:eb:55:c5:d8:c5:dc:b8:b5:12:06:9a:90:3d:b2:99:
         c7:c6:c3:52:14:f8:02:39:33:5f:44:2a:d8:51:5e:fe:77:ba:
         8f:9b:ef:4b:c1:8d:a5:50:a7:18:ca:ae:0f:c9:3c:f3:06:88:
         9d:39:78:93:81:1f:12:02:46:fb:70:2d:da:f7:52:5d:a4:42:
         56:02:be:81:9c:3a:ab:52:75:d8:f9:8e:bd:c8:dc:5e:56:66:
         dc:cf:f4:26:b9:c1:dd:5a:eb:ac:75:92:a8:f0:a6:e0:14:af:
         f2:63:d1:cc:f6:bd:0e:33:51:75:58:39:77:16:8b:91:01:a9:
         0c:e7:3c:44:9b:ec:a5:a6:22:89:7d:bc:84:fe:26:1c:ee:1c:
         24:3b:5d:3b:1e:50:05:e0:05:18:50:e9:42:8a:6a:b6:8c:16:
         5d:1d:86:d9:39:8e:f8:9b:3c:8a:18:7c:8b:23:5d:34:a4:ee:
         c6:d0:72:fe:4e:cf:0b:5d:ac:28:c4:90:aa:5b:34:57:37:94:
         46:56:45:8e:4b:31:0d:ef:65:92:37:b9:f0:e9:9e:ea:f8:3a:
         50:9e:70:48:b3:7d:20:5f:b1:9c:b5:4c:a1:bb:cf:b2:63:49:
         d6:ba:36:31:ab:2c:5a:72:a2:5b:f5:79:1f:f8:37:e6:89:24:
         bb:26:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----