Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File:                     _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier:          X/kqi6eBJo0jmNpp+WLxW6j/7n1fiY57pNH3UpyV/Uo=
Subject key identifier:   02:4B:F2:72:DF:7C:47:97:F7:E5:A5:37:07:40:21:C7:7D:9F:98:C5
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer:       /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial:       01962E994616C6E191F2ECB845EA35411C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: 5qjTmBfkucMCiBdLjXwx6ftf7HOSFrrDrrB3ncXfRBU=)
                          2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:46:16:c6:e1:91:f2:ec:b8:45:ea:35:41:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=024bf272df7c4797f7e5a537074021c77d9f98c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:c6:56:c9:ea:ab:da:2b:e6:bb:22:d8:c9:
                    cb:16:98:5d:ac:f1:94:76:f1:a0:6d:cc:76:6d:1b:
                    35:1d:41:44:3a:13:81:8e:09:2f:ad:f2:c7:c2:a7:
                    13:05:97:10:17:c4:f7:5f:a4:5e:f2:54:82:30:e4:
                    8e:f7:6e:05:d2:c2:f3:be:83:af:56:99:16:93:08:
                    21:b3:39:1f:5c:16:45:a2:64:20:e5:93:3e:2a:19:
                    52:d0:bd:f1:b0:3a:a7:a0:ab:77:d2:cf:d3:a3:fb:
                    ef:9f:b2:a0:fb:ef:b2:f6:52:75:6b:1e:15:d9:d6:
                    8c:6d:94:d2:8a:34:62:54:21:f7:af:da:55:59:9a:
                    ad:9f:59:8f:ed:35:56:90:ec:de:b9:14:62:3a:46:
                    4e:d7:95:93:1f:24:39:44:66:74:83:4b:ab:71:46:
                    d3:0a:13:b6:6c:b2:c4:77:a8:8a:8d:8f:53:5e:c7:
                    64:87:8a:de:1c:26:0f:65:f9:ad:c2:ab:da:b4:84:
                    11:7b:e4:51:86:a5:b6:d0:8a:d8:a1:a9:16:44:6d:
                    80:d5:bb:f3:56:be:93:ef:78:16:78:47:8c:99:66:
                    d9:fb:0b:87:7c:74:15:6f:9a:9b:71:12:7d:85:ec:
                    49:34:72:b5:74:a0:4b:c4:9a:99:d1:98:43:ef:b1:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4B:F2:72:DF:7C:47:97:F7:E5:A5:37:07:40:21:C7:7D:9F:98:C5
            X509v3 Authority Key Identifier:
                keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:4e:bc:7a:22:38:bf:42:d2:40:df:33:6a:fa:a6:2c:85:
         f4:12:bf:3c:dc:49:e9:e3:ab:56:db:b5:d7:98:fb:d2:6e:1f:
         36:53:c8:c5:75:67:fa:bc:d8:69:4b:14:47:65:72:e6:25:ab:
         b4:cc:04:10:77:80:3e:29:77:b5:0c:28:30:ea:b2:e2:22:76:
         ed:bd:b7:69:ae:de:9b:bc:86:76:ef:26:90:ca:0c:28:6e:66:
         bb:37:b8:2c:7a:2c:e8:f3:d3:f7:83:10:d7:d0:5e:74:ab:c6:
         5b:51:ae:9e:a8:cb:5c:59:bf:d6:89:31:65:4a:11:ef:40:0c:
         20:06:e5:8f:b3:cb:86:a8:1a:d3:5d:63:9a:2f:31:aa:16:66:
         38:1c:c2:08:d2:06:99:05:db:18:54:af:01:2e:95:5b:59:d1:
         d5:f5:a2:64:f0:f6:69:5d:a7:b8:8b:80:73:06:5a:da:a0:66:
         59:5a:c4:67:9c:1c:7a:f2:be:bc:fb:ca:39:a2:a8:94:d3:85:
         b3:b8:fe:34:25:60:73:f2:50:c9:11:84:4d:f1:c3:91:f4:7f:
         6f:3a:4a:0c:06:5d:f4:4a:0e:88:48:cb:b8:0b:1c:ec:25:50:
         75:36:15:21:74:2c:ac:c4:52:c8:05:4b:02:44:7b:5a:f6:06:
         58:e9:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----