Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          b7qdCAzAzojpK3a/xKnraVwdNpfNJ+nQGztOePK2zls=
Subject key identifier:   FB:69:8A:3E:83:1A:87:D7:50:A1:8C:AE:16:D8:C1:4A:F1:97:5D:1B
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       01962DF41EC034C72FCE2F2B1CB982C50445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: zZ/2J9LkVU2OPPqBTKl/ACXOVcVvU2eZm+s66ZTfOCQ=)
                          2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1e:c0:34:c7:2f:ce:2f:2b:1c:b9:82:c5:04:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=fb698a3e831a87d750a18cae16d8c14af1975d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:e9:46:27:eb:03:0a:8d:47:ea:6c:73:96:
                    bd:dc:57:ba:24:d7:b1:d4:c9:00:1d:5f:da:9f:51:
                    4d:e3:36:6b:45:58:33:c1:1c:ab:87:69:fc:66:55:
                    36:4d:e2:e4:ea:83:2c:f4:e1:a7:52:4f:0c:07:d8:
                    64:66:f6:60:e0:a2:d4:5f:f5:ab:05:c3:b2:d9:5f:
                    c7:ab:73:38:ed:3e:d6:64:4f:49:7e:a2:e9:bd:6c:
                    77:a5:ff:db:f9:c1:66:e8:0a:8c:48:a4:26:e3:f4:
                    27:bc:f9:7e:a0:b9:aa:d4:90:5a:10:85:ae:f3:e7:
                    8e:b9:29:c0:28:55:5a:45:64:a4:6f:64:ac:a9:32:
                    2a:92:de:89:8e:3d:5e:98:b2:9c:a2:c8:ae:45:55:
                    52:72:16:b7:9f:bd:e0:e4:49:9c:5f:84:2c:e8:6d:
                    13:e1:1b:b5:34:ea:90:aa:c9:76:c4:dc:b5:19:28:
                    85:0a:6f:68:69:70:a0:5c:57:52:bc:e0:4c:ab:c4:
                    fb:b7:31:5c:e6:09:45:62:28:de:0b:54:1f:aa:79:
                    3f:a4:e8:37:31:d5:8c:69:fb:85:73:98:77:0f:91:
                    8a:2e:4d:a1:8d:b5:68:6a:df:20:bc:c8:8f:e4:2b:
                    db:ad:4d:40:e9:54:5c:82:ec:c8:3d:f9:ae:7c:99:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:8A:3E:83:1A:87:D7:50:A1:8C:AE:16:D8:C1:4A:F1:97:5D:1B
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:66:5c:50:7b:52:b8:b6:42:03:35:2c:64:15:9d:1e:ab:
         d4:21:67:59:7a:3d:93:ad:9b:28:33:30:a0:d5:4d:93:07:44:
         aa:ea:0a:3a:c3:33:80:56:4c:d4:d9:0c:84:83:ef:c7:0b:de:
         19:fd:32:6d:87:ab:35:60:fb:41:3d:bd:13:f9:a2:da:19:6e:
         bf:ae:d6:0e:6d:de:6b:e0:24:5f:c4:20:76:99:d4:7e:80:2a:
         41:bc:b6:36:be:2d:5e:5e:de:60:d8:3f:c0:6f:4a:af:a0:30:
         61:71:bd:e6:ab:cc:8e:4f:73:58:a4:c0:1d:72:c1:44:08:3a:
         37:a1:bf:ae:e7:8e:38:09:2a:23:f8:97:c0:86:62:f6:e9:f5:
         7d:c6:d1:16:17:66:67:40:3d:f6:ca:ae:06:6c:7b:43:f4:86:
         ce:cb:72:08:66:80:0b:b3:df:75:91:ff:7e:dd:2c:b1:52:a7:
         f8:f4:84:21:81:11:91:3c:7d:e7:78:a0:fc:87:45:bd:e6:f4:
         93:94:6c:7f:21:59:e9:ef:f8:c7:77:94:00:3d:7f:dc:fd:7b:
         ef:dc:6c:a4:c2:26:3b:e5:8b:6b:11:ec:14:95:55:ec:48:82:
         0b:83:31:cc:3c:b4:72:10:28:4e:e8:02:b1:13:42:bf:e8:21:
         14:37:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----