Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File:                     ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier:          HQutojhCLs5XuwpP4Ckf2fXBP1+bliY9vzNI1PjudgA=
Subject key identifier:   14:C0:C2:1A:A1:FF:1F:A4:B8:61:83:0C:BD:FA:0E:81:35:50:DB:9A
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       01962F07067FB0B978FC57C16B898033FF51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number:          1239
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=)
                          2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=)
                          3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: DGmwUCQiikt6IxpIvn8yUpCy1Okm+0o7XNraQzxEcgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:06:7f:b0:b9:78:fc:57:c1:6b:89:80:33:ff:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=14c0c21aa1ff1fa4b861830cbdfa0e813550db9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:32:43:b0:51:57:ce:2a:ba:a7:e7:ae:da:
                    84:7f:b8:19:9b:ce:a2:23:d0:b0:8d:53:5a:1a:0c:
                    c8:ba:a3:a5:0c:28:6d:e2:c9:bb:12:7c:2e:a9:88:
                    2b:19:5f:d1:2d:82:07:0b:ca:80:63:c2:bf:31:6f:
                    fb:cf:3c:c9:f4:0b:b3:e1:c9:75:2a:16:5a:7f:54:
                    21:2e:12:33:37:6a:ae:b3:22:49:e8:e8:bc:7e:a3:
                    70:3c:d4:03:d8:81:cc:84:48:82:7d:77:18:74:f2:
                    70:a3:d2:19:6b:37:1c:34:0b:d1:fb:7e:30:13:8e:
                    33:98:b4:44:d7:ab:99:39:75:13:cd:20:52:e5:32:
                    c9:c9:da:db:93:b8:30:50:d7:0f:02:05:a2:f0:ac:
                    7e:06:1a:c8:ab:13:a7:b9:8e:42:2f:d8:97:b3:88:
                    41:79:57:49:53:80:d8:23:f9:c4:83:16:ba:bd:dc:
                    df:b6:a3:ab:b4:17:d2:b3:dd:cf:ee:1b:cf:58:00:
                    23:06:06:27:2e:c4:83:72:f3:23:b9:ca:d7:d8:4a:
                    c1:6b:c6:12:18:1a:26:9b:40:d4:4e:15:d7:d9:4b:
                    68:d4:cc:dc:b1:c3:bd:d7:21:a7:b8:5c:b4:4e:1f:
                    35:39:64:25:90:ea:ea:65:3d:88:d7:9d:72:f8:ee:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C0:C2:1A:A1:FF:1F:A4:B8:61:83:0C:BD:FA:0E:81:35:50:DB:9A
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:ab:66:04:a2:f2:98:59:fb:0f:a4:19:64:36:1e:72:54:
         a8:30:9f:06:af:da:af:f9:5a:62:82:22:1e:db:c8:2d:28:8e:
         f1:a8:75:10:10:57:2c:f8:62:4a:62:c4:a3:2c:68:0b:71:2a:
         fd:14:a0:4b:e2:9b:4b:84:9c:02:4f:10:22:91:58:5f:eb:a9:
         3b:7c:25:fa:d8:10:40:9d:49:79:a5:a1:bf:12:6d:24:67:1c:
         ce:3c:0e:1b:74:5c:f5:e9:a7:85:1b:ce:22:7c:fc:b5:15:9d:
         c0:2b:e1:16:cf:88:a5:24:ad:2b:e1:4e:8f:ff:16:c5:0a:56:
         22:fe:e8:99:93:f3:26:3f:bc:e5:cb:67:3e:98:bd:07:5c:01:
         a4:57:e0:78:de:52:38:b9:06:72:ab:33:eb:2f:7f:37:12:e6:
         ce:e6:96:d0:fd:a4:d2:4d:ef:90:3e:99:6d:f8:94:5b:72:a2:
         3d:64:2e:bc:80:77:0d:d1:3e:f3:03:2e:eb:d9:93:a3:69:e5:
         2a:6f:a3:b8:2f:4d:8d:0c:92:9b:80:f2:a2:f2:d7:2c:d7:51:
         ab:3f:dc:f8:f6:fc:2e:74:ae:77:20:99:ab:c1:82:c5:f1:a4:
         d9:b6:f2:83:e9:40:af:c8:f7:18:9b:ca:35:17:f3:dd:9f:63:
         82:41:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----