Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File:                     FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier:          e4rTIAu7mRwu4Si58Fo/O208w/B19F6QMdc9YuJTmaM=
Subject key identifier:   D0:29:63:45:51:A1:3F:18:85:51:0B:DB:3D:6F:80:23:55:2C:CF:A1
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer:       /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial:       01962E99571A329ED2A4263A9719ADAEB9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: 620N/j9FfAweoRyKx5en9FeEpZhYA5BtCocfvwjVb4I=)
                          2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:57:1a:32:9e:d2:a4:26:3a:97:19:ad:ae:b9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=d029634551a13f1885510bdb3d6f8023552ccfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:ce:b1:28:8d:6e:37:bf:f1:0b:86:7f:74:
                    2b:9a:9e:9f:30:55:c0:6c:6a:72:4c:72:1c:69:c3:
                    10:5e:2d:f0:96:21:69:f2:33:16:0a:9d:7e:0e:e8:
                    8f:7e:21:2f:43:69:07:7a:cb:df:b6:25:dc:1f:64:
                    09:0e:49:0c:09:2a:13:6e:c1:39:ca:28:6b:84:a8:
                    74:09:cd:e1:13:71:71:7f:d5:1c:7f:af:11:b2:b8:
                    80:42:a7:3b:80:61:23:d1:c8:9c:4a:f7:2f:b2:f6:
                    43:c4:77:c5:c0:ed:50:87:00:14:a4:7d:1a:ec:6f:
                    e5:85:e6:b6:31:5e:3f:f6:a4:be:65:ce:ca:9d:48:
                    39:2a:88:26:2d:fd:32:d3:cb:fd:c9:d1:03:50:cd:
                    ba:61:bf:8c:60:40:8b:c4:ab:24:d9:92:93:78:ef:
                    35:13:1c:8e:2b:f9:88:d4:ac:b3:bd:4c:23:b5:61:
                    fe:e0:10:48:f4:df:54:0f:46:99:6a:51:1e:2d:a5:
                    58:4d:83:47:7d:4f:f5:d2:f7:ea:c9:e7:35:a6:de:
                    46:25:cb:d5:79:14:99:8c:9c:86:32:c9:27:66:76:
                    60:dd:ae:d7:9e:56:00:16:cd:89:5d:93:b3:12:de:
                    fc:b1:fa:11:58:f7:38:9f:d7:08:3e:6d:d4:1d:22:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:63:45:51:A1:3F:18:85:51:0B:DB:3D:6F:80:23:55:2C:CF:A1
            X509v3 Authority Key Identifier:
                keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b2:98:5d:dc:7a:b3:48:aa:88:20:d9:93:de:b8:38:a8:6f:
         59:27:0c:f3:ae:11:7f:54:b9:42:89:ca:7f:88:d4:df:50:9f:
         a9:cd:ad:df:84:33:be:5a:db:0b:77:9c:09:30:92:6f:02:6c:
         7c:24:88:4c:f4:11:e4:d4:66:6e:c0:d8:66:a5:bd:bd:a1:4e:
         f3:6b:f5:d8:3d:3f:91:c1:41:20:bb:0e:78:22:27:f3:b6:5a:
         8f:1f:34:e4:5f:82:bd:bc:cb:53:68:0f:a1:92:5b:48:4b:66:
         4e:4c:ae:d0:91:88:21:46:92:88:2a:44:cf:52:56:89:b9:9d:
         d2:43:58:05:e6:19:90:4f:f3:3f:e5:71:f4:19:bf:42:45:3b:
         eb:56:b7:74:70:ee:ad:05:8a:7e:2f:3e:f5:ff:a4:cd:0e:f8:
         61:1a:bd:50:a7:2d:74:3b:b3:4c:63:cd:a1:8b:d4:4d:1b:72:
         5f:f8:24:b5:9c:41:dd:43:70:a2:d6:2f:79:79:94:4f:4e:96:
         c0:80:c4:17:7b:73:fc:39:14:74:20:dd:28:ea:38:fe:86:8e:
         16:8f:1e:12:d3:f0:4c:68:db:19:15:5d:3a:8f:74:ca:37:94:
         01:54:9c:08:20:bd:8c:c8:63:c9:d7:c3:00:53:09:43:42:ee:
         be:9d:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----