Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File:                     rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier:          HqJZEBEJNRKx0Jffk7WoJss1NYrfyKSKDt6COH5IbRI=
Subject key identifier:   48:A3:D4:38:B5:72:F7:78:FA:66:7E:B4:D7:BC:28:3A:94:81:05:69
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer:       /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial:       01962ECFDFC75E4F7FDE88C18A6EE2173532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
                          2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
                          3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 1+Cx6QirJrzJR9mHXzKqMNdwZrr8PkEFQ1VpQnpKwI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:df:c7:5e:4f:7f:de:88:c1:8a:6e:e2:17:35:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=48a3d438b572f778fa667eb4d7bc283a94810569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:34:88:06:0b:94:7d:0b:9b:a6:84:0b:94:
                    9f:53:c7:57:c5:7e:c8:d1:49:6e:18:c0:de:f2:08:
                    f9:89:fb:69:d4:6c:84:7c:8f:7c:17:db:7d:e1:22:
                    60:00:e2:2e:71:6d:e5:b5:d9:8b:74:b0:60:bc:a8:
                    63:f8:ae:d8:e5:d9:9b:00:16:bc:0f:5a:20:14:7c:
                    67:5d:79:c2:a1:20:6a:bb:ee:c3:4e:89:d9:28:1b:
                    75:0f:1e:30:a8:bd:b2:88:c9:50:2c:2b:7c:ea:e5:
                    6c:ff:24:86:f7:4c:ab:47:9e:c9:19:80:db:e1:79:
                    ad:75:54:fc:cb:1a:f5:c9:6e:aa:39:ca:6a:6c:21:
                    89:f5:0f:2a:92:b7:a6:11:3e:a0:3b:b3:02:1f:ac:
                    71:c0:36:79:fd:53:b5:b1:28:e7:b7:4c:91:ec:73:
                    60:09:08:a6:aa:40:ba:e3:c7:c4:69:c0:24:61:5f:
                    aa:ed:84:66:95:a4:40:98:2d:6f:75:0e:21:8f:5e:
                    88:3c:08:48:dd:1d:9d:d5:79:c1:69:b3:63:fd:dc:
                    ff:7f:d8:d4:c6:21:5e:e3:c0:03:50:f8:96:b5:16:
                    2a:87:16:fd:4e:bd:a8:4b:00:02:0e:61:c0:ae:f2:
                    77:e4:6b:d3:bb:01:51:60:2e:85:c2:ba:13:9b:23:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:D4:38:B5:72:F7:78:FA:66:7E:B4:D7:BC:28:3A:94:81:05:69
            X509v3 Authority Key Identifier:
                keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:9f:20:81:b2:ee:0a:c0:3b:73:17:a4:ed:14:5c:91:f3:
         4e:44:2b:59:da:0f:4c:fb:64:21:47:30:02:d0:14:25:d5:39:
         5e:e4:e8:1a:3d:86:69:34:35:58:46:91:3d:99:dc:9a:9f:13:
         cc:f3:f0:20:41:64:51:18:3d:9d:b8:5d:25:37:48:ae:07:40:
         7a:4c:3d:67:0a:67:c2:cc:e4:6d:16:8a:65:33:25:e7:23:44:
         d1:0d:dd:a5:1d:93:9e:43:9a:45:19:d6:90:30:bc:2e:f0:92:
         d7:1b:e6:bb:6f:cc:00:65:99:7b:e0:3e:28:f6:e0:5a:64:b0:
         30:88:36:8f:17:98:4c:2c:68:25:88:c2:8e:f0:9f:8a:a6:1e:
         f4:09:69:29:5e:92:75:7f:d1:47:eb:fe:c1:b1:58:df:12:b3:
         cc:80:5f:4e:94:d2:45:51:07:ed:8c:7f:96:ce:49:69:ea:58:
         74:33:26:4f:64:7c:98:70:cd:f4:fb:0a:aa:6e:35:bc:65:ba:
         d8:87:1e:1f:70:cf:12:d9:c7:a7:d5:8c:89:95:ad:20:f4:f2:
         c9:d8:d3:8b:37:64:48:67:dc:58:86:ec:3b:75:88:c5:28:0a:
         ba:17:cc:a1:2a:ff:12:b8:2e:84:5d:78:75:5f:8d:da:5e:f6:
         f4:4e:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----