Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File:                     _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier:          Gto6W8PAdirx7w+M0dkcKhdrM0LpNwH09rSbPQRGEEk=
Subject key identifier:   AC:9C:D6:7D:44:D8:A3:7C:23:FB:31:47:01:49:0F:7A:AD:24:9A:C7
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer:       /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial:       01962E61C5E2AF35945D9B7187B3BD9F8F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: raX8lagrAWMr7hUfISlYYwDcndpNPOeOX8QIfpuDvSk=)
                          2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c5:e2:af:35:94:5d:9b:71:87:b3:bd:9f:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=ac9cd67d44d8a37c23fb314701490f7aad249ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:c7:ed:e8:c0:f7:01:19:68:34:35:93:cf:
                    09:f5:29:51:88:13:eb:ce:9f:90:c0:42:ae:ea:9a:
                    87:e4:38:43:c1:67:40:94:35:51:c0:fa:ee:34:d8:
                    74:a6:5a:36:0e:5a:84:b5:b0:c5:df:73:e7:2b:41:
                    66:78:f8:72:47:74:ad:58:2e:12:80:dc:11:70:32:
                    18:ff:63:c5:f2:35:13:9c:1f:01:b2:13:91:db:37:
                    f4:7f:99:9d:ad:66:4d:0a:45:bc:41:ed:aa:0c:41:
                    62:e8:63:9e:40:ca:7f:e9:9a:9b:32:39:b4:05:c6:
                    05:14:30:96:de:a4:52:7f:a0:38:79:b7:0a:e7:6d:
                    18:b8:b5:88:c2:f8:eb:78:37:af:35:6b:59:42:13:
                    9d:08:e3:09:f3:6d:39:50:54:6a:82:7c:c2:de:34:
                    d9:de:51:86:12:5f:c8:14:68:37:0a:2f:38:3f:ed:
                    9d:ee:00:b1:b1:56:d2:1b:e7:92:e4:82:fa:97:20:
                    41:0a:ca:26:ff:78:1f:1c:f1:08:f9:c1:bc:3e:f8:
                    61:5c:81:69:99:fc:f3:f2:90:20:2a:38:c3:d0:a0:
                    a4:d7:e8:0e:f1:14:4a:c5:83:44:a9:d1:cc:23:e2:
                    f8:1d:28:70:96:5d:ae:bc:02:e6:df:5d:50:3f:d4:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:D6:7D:44:D8:A3:7C:23:FB:31:47:01:49:0F:7A:AD:24:9A:C7
            X509v3 Authority Key Identifier:
                keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:37:d9:af:88:ec:fd:a7:d5:4c:78:3c:db:87:8e:12:2e:
         4e:4a:04:e8:ed:7f:85:a2:a9:5b:2d:4d:84:e5:5a:65:e8:57:
         3e:ed:6a:18:a8:c8:d4:9a:7d:ef:cc:1a:9e:1f:cc:d1:f4:d0:
         01:65:90:7e:8b:9b:51:fe:8b:dd:ac:0f:5f:93:b5:c2:cd:46:
         20:95:3d:a6:b3:c4:67:cb:94:ec:80:04:4c:da:1f:e3:fd:4a:
         30:08:3a:c2:30:10:e5:9a:b9:1c:28:d5:d6:3f:c9:49:eb:36:
         2c:d6:be:b3:0a:1d:f1:45:7a:98:62:40:8e:43:ec:24:42:50:
         30:a2:cc:c9:eb:12:54:eb:c1:b0:39:ea:f5:a0:1e:4e:bc:28:
         22:c0:53:10:0e:79:11:48:c9:33:12:04:84:7a:62:7a:ed:33:
         b1:ff:33:78:ae:de:21:db:b7:bb:99:b8:2f:d5:f5:f3:d1:f8:
         b7:2f:50:34:19:75:62:c8:1b:26:6b:06:14:0f:6a:89:fb:1d:
         59:f2:a0:da:59:5c:ff:41:e1:d2:4e:6b:42:b1:bb:a5:7c:6a:
         05:37:e4:b0:b1:b5:be:d7:6a:84:00:40:52:ad:20:72:87:ae:
         55:c2:0d:f4:c7:6c:a4:23:f6:41:67:9c:07:85:3b:6e:30:08:
         73:24:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----