Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          XMZxVmQhGzafThwlHLeSLJskY6gwtvgLvGcbwZJp4yk=
Subject key identifier:   4B:22:7E:9A:07:4E:68:23:76:88:97:0D:F8:42:8C:E9:81:F1:B8:57
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       01962E99328E7577A19A9920EC7550992DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
                          2: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
                          3: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: yBNQj0OsrqZ7lD851kOmAv5Fe4Mh1SnitUWnDKCntv4=)
                          4: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:32:8e:75:77:a1:9a:99:20:ec:75:50:99:2d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=4b227e9a074e68237688970df8428ce981f1b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:9a:94:b5:e8:c1:b3:de:d9:ff:89:71:19:
                    dc:1b:ab:a1:52:17:d1:36:55:ac:a8:d8:67:a9:1e:
                    1b:68:c5:10:c7:89:f5:2f:7b:1a:7b:49:7a:06:a1:
                    02:7d:90:43:6d:5d:59:9b:ad:e9:b6:36:2a:33:21:
                    39:cd:b5:a9:af:1d:56:a9:b9:55:1d:5f:b1:8d:97:
                    03:81:7d:be:85:11:95:ab:49:75:d2:0c:19:da:7e:
                    97:88:e1:74:df:b1:d5:f3:ef:79:29:e2:ea:76:d9:
                    09:8c:a3:9f:b5:0a:f6:2a:99:f9:7f:cb:d1:3f:04:
                    3a:5a:4d:ed:41:63:1f:df:a1:bb:3e:26:f6:8b:75:
                    a9:dd:ba:6f:05:88:c3:02:48:44:27:f5:6c:2b:ee:
                    99:3b:92:2b:80:3c:a8:ad:72:1a:3c:de:4e:5f:50:
                    bb:6e:b7:35:c2:be:f3:8b:9b:cb:e7:4b:c7:67:0a:
                    41:2a:2f:e1:88:0a:13:e7:6e:e3:2b:29:dd:41:c4:
                    62:15:33:32:6d:75:90:71:4b:3b:68:19:1f:a6:26:
                    c5:36:2e:ef:32:53:bf:02:37:aa:30:db:61:05:76:
                    44:f3:9e:69:12:f0:e0:55:9a:d5:dc:7e:cb:8e:ee:
                    d5:8c:8d:83:4e:bc:6b:88:cf:11:ae:e9:23:3b:63:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:7E:9A:07:4E:68:23:76:88:97:0D:F8:42:8C:E9:81:F1:B8:57
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:89:18:18:35:e5:87:b0:18:df:69:a8:80:fa:86:9c:67:
         f4:70:c5:cd:9e:d7:16:26:93:38:92:7f:ff:0d:e8:85:76:d8:
         58:c0:b1:7c:f5:bf:0c:58:ec:72:db:81:b9:2d:12:35:0f:ab:
         ff:47:df:49:99:af:1c:6f:de:41:b7:de:37:c9:c7:00:34:22:
         1a:96:99:0c:d6:f0:a5:b6:1f:84:f0:8d:ed:6b:3c:4a:3b:d2:
         c5:c4:67:48:5c:f9:6e:31:30:6f:5c:c9:a4:d6:c5:5b:c7:72:
         2c:98:ec:bc:66:a8:30:17:bf:93:22:83:23:ea:b2:5e:3e:1e:
         44:0d:7b:dd:af:25:f3:2b:06:5b:0a:f2:f5:46:d8:89:11:66:
         ef:0b:59:8d:19:84:03:3f:90:bc:57:63:25:fc:91:bd:ec:fd:
         d8:5e:68:d0:08:30:8e:f2:4a:2d:df:b4:42:06:32:2b:8c:07:
         5c:cf:13:e0:e4:41:20:cb:1b:18:fd:e0:07:9e:47:69:05:97:
         1e:43:91:58:34:25:01:f9:aa:e6:a3:5e:13:27:36:32:e9:9a:
         fe:bc:12:9a:85:07:f6:00:7b:f1:78:0e:a1:eb:71:8c:47:39:
         b3:e7:9f:3c:9c:4e:6a:37:8e:6a:15:4e:82:70:15:52:5f:a3:
         de:a6:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----