Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File:                     suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier:          ZNY4Dvwmwn1P+gJpZz1/OQSdLBschykAcLKcVqL4SQg=
Subject key identifier:   EE:35:F0:DA:F8:CA:D9:51:AF:FF:BC:45:D4:94:B8:02:41:A6:DE:15
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer:       /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial:       01962F74C96423D4C83374439CB25F05CD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
                          2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
                          3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
                          4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
                          5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
                          6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
                          7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: b/quj6Oe+UnzwkoC+izCAm2laRUQwz3uCJsvofqQvyc=)
                          8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
                          9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:64:23:d4:c8:33:74:43:9c:b2:5f:05:cd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=ee35f0daf8cad951afffbc45d494b80241a6de15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:4f:b7:58:30:fc:69:25:df:84:b8:b9:b2:
                    bc:c1:d8:6c:42:43:d8:9c:bb:e4:87:e9:a8:8e:05:
                    4c:25:5e:8b:b9:6b:de:f1:9a:d4:58:c5:be:64:24:
                    4b:4e:66:8f:f0:22:06:6e:31:57:67:0d:8b:ce:6d:
                    fe:ec:9e:0e:02:25:5d:fc:2f:a4:57:ff:9f:a4:09:
                    3e:19:18:b8:76:6c:03:3e:49:c9:7d:88:26:83:83:
                    46:c2:f9:cf:7f:02:37:da:4e:eb:ea:29:75:86:2b:
                    c7:ee:d6:23:3b:66:7f:99:02:0c:cd:00:36:57:01:
                    53:1e:49:78:bc:65:e9:06:e2:40:cb:0c:4a:0e:08:
                    50:13:b5:98:c6:bb:b4:30:c8:68:e9:70:97:f0:84:
                    f5:a3:dc:a1:49:64:40:af:08:05:42:de:8b:bf:cd:
                    71:85:da:df:ed:d2:69:8e:82:88:fe:94:cb:18:ed:
                    4e:a3:5e:bf:7c:bd:4b:5e:68:67:8f:45:9b:c7:f0:
                    10:7d:12:5f:a6:19:c3:5b:27:9d:e6:73:7c:29:5b:
                    ff:ee:fb:71:f3:88:1a:c3:85:52:8e:9f:aa:61:4d:
                    ef:b3:c5:8b:c2:8d:8b:a1:4e:f9:59:da:b1:19:d1:
                    2f:fc:8a:ba:a7:cc:cb:1b:fa:50:07:85:2f:12:24:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:F0:DA:F8:CA:D9:51:AF:FF:BC:45:D4:94:B8:02:41:A6:DE:15
            X509v3 Authority Key Identifier:
                keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a2:a3:ac:c1:90:25:20:2a:71:5e:ac:e2:46:bc:6f:5f:7e:
         fd:ea:28:97:2d:08:30:a4:dc:c8:bc:25:3e:f3:f9:94:b8:cf:
         99:67:58:8d:e4:47:1f:aa:05:a4:d7:ed:c2:aa:e2:5a:37:50:
         03:56:7d:ce:75:01:da:72:d8:6e:ab:1a:07:2f:43:8e:d4:bb:
         df:0f:be:fb:5c:13:1a:ef:8d:23:47:28:02:5b:02:75:1a:86:
         ee:1c:09:45:6f:8b:4e:12:d8:d9:f4:9d:26:fe:60:da:40:99:
         1e:84:d1:bd:56:99:dc:ad:b4:5b:61:6a:44:6f:a9:5d:00:15:
         99:13:fb:99:34:8c:13:0e:7d:ce:a6:82:36:4c:a7:44:47:50:
         3b:02:1d:cd:fe:db:2f:79:60:8c:c7:ad:3a:da:a8:96:dc:2b:
         0f:40:0d:15:a1:e1:d2:00:5a:da:f7:30:72:11:24:2a:01:79:
         b7:b0:d6:b9:8b:9b:ef:f3:40:d6:8e:b1:11:2f:4f:ba:4f:2f:
         ef:28:0d:ee:32:eb:d1:d8:5d:7c:f1:5a:24:b0:8a:40:fc:0d:
         1a:5b:3f:2c:ec:b8:53:5f:67:d0:36:5b:ab:e9:fc:e8:a4:0c:
         63:1d:eb:32:4d:00:e1:db:fc:38:dd:15:2c:3f:16:6a:5e:0a:
         71:94:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----