Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File:                     flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier:          zOaDnnOgy74xjD0Ww5Pzu9XyXeY54s6xXzgbFH2l/fc=
Subject key identifier:   A1:F4:95:C0:11:BF:2E:CA:D4:F0:7D:46:AB:F7:2C:0C:8A:45:23:7D
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer:       /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial:       01962E61FC9D772E07DFCEE1343C39288A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:35 +0000
Files and hashes:         1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
                          2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
                          3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: dml6yQwVbIxuOiRq2VDNdY1ii50C+XF2x+B0vkBjS4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fc:9d:77:2e:07:df:ce:e1:34:3c:39:28:8a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
        Validity
            Not Before: Apr 13 09:01:35 2025 GMT
            Not After : Apr 14 09:01:35 2025 GMT
        Subject: CN=a1f495c011bf2ecad4f07d46abf72c0c8a45237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:6a:55:7f:9d:a8:e2:60:85:b1:c2:1a:fd:
                    b7:fa:6b:02:2f:e3:2a:71:ee:6c:39:aa:75:7a:94:
                    22:7e:29:00:ad:49:61:7d:ef:92:18:0d:6f:75:3a:
                    d4:b1:7f:cc:bd:e8:40:16:61:b7:2d:30:d6:4a:17:
                    87:03:92:f5:27:96:9a:e5:2b:f4:27:24:f7:75:73:
                    1c:04:93:62:49:e7:1d:17:30:4a:84:cd:6c:cb:90:
                    e8:b3:9c:86:00:99:e6:f8:37:10:4d:31:a3:b2:14:
                    a5:90:52:d7:e3:fc:09:90:ef:87:1b:91:63:f9:b3:
                    92:e4:d2:4c:15:7d:af:eb:69:0e:31:89:68:79:67:
                    4e:06:cb:8d:04:36:1d:5b:d1:1c:87:39:6e:ac:44:
                    4a:7f:fa:6f:3a:70:4a:82:8a:36:9a:85:48:16:c7:
                    52:6f:a6:dd:02:0a:60:da:3f:54:0d:90:c3:0a:32:
                    49:54:3b:4f:46:20:11:f7:6b:23:b8:5e:99:61:46:
                    cc:e6:0b:8d:9d:d9:18:a0:de:dc:e0:94:d4:24:43:
                    15:97:82:34:5c:8d:e0:bf:ae:96:77:d2:b3:40:69:
                    f5:30:7c:e6:01:7b:73:3f:f0:e9:c0:b0:cd:17:e8:
                    02:2f:2e:d1:5c:38:08:d0:47:9c:f7:78:a6:d9:18:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F4:95:C0:11:BF:2E:CA:D4:F0:7D:46:AB:F7:2C:0C:8A:45:23:7D
            X509v3 Authority Key Identifier:
                keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:3e:29:0b:a6:68:51:0c:50:ff:a2:e6:0b:5e:23:d5:82:
         dd:4a:9a:17:08:f6:13:5b:87:1b:1e:a6:3c:a9:74:ae:6e:cf:
         34:87:87:65:ce:a8:7a:20:c4:33:a1:f7:3e:cb:bf:23:8f:c4:
         dc:97:51:57:18:ab:9c:6e:4b:c2:17:12:b0:3d:b5:0b:57:8f:
         85:6b:b7:7e:ca:52:e7:0e:28:29:1a:d9:08:97:bd:d5:c9:9f:
         46:0c:e4:a9:ee:9a:24:bb:aa:89:e9:2f:7b:b5:a0:10:c8:b6:
         5e:2e:ee:f9:14:4c:a5:5c:34:59:11:5d:1d:b7:96:d6:0c:4a:
         54:b7:72:d5:07:29:67:c5:5d:db:91:62:1c:73:4e:b8:e8:39:
         a9:88:58:70:2c:6f:64:e8:65:1f:eb:7a:01:5b:b0:f4:fb:06:
         4e:51:67:e5:b6:ca:19:4b:73:fb:b2:89:6d:a2:20:21:90:5a:
         e6:cb:43:0d:cd:c5:a0:e2:4c:eb:0e:e6:07:78:d2:c4:41:c9:
         54:05:21:77:3f:a2:41:e5:29:c3:18:24:8b:0e:27:b8:97:f2:
         ac:b7:7b:d6:89:ec:24:a8:eb:73:30:0e:61:8b:b5:37:9d:83:
         b8:df:fb:c7:8e:2f:3a:be:7f:df:b6:c6:cc:34:58:57:85:1a:
         0e:d0:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----