Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          oFLlPZFzNsXNgegJ+3iXuHcY420d4Vq6YuFCuqSDY3Y=
Subject key identifier:   D3:35:6E:F8:A9:CE:64:4B:16:68:63:A5:89:2F:3D:A7:3F:AF:33:11
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       01962F06FA23A140B88B1EA0644B4E273E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
                          2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: QVl4pnd45Kt7/nBN/ZzRAwdJ1Wrm+4Yol5xI4e0uSDk=)
                          3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
                          4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
                          5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:23:a1:40:b8:8b:1e:a0:64:4b:4e:27:3e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=d3356ef8a9ce644b166863a5892f3da73faf3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:af:6b:1f:3d:35:b6:76:3d:1b:6d:8a:00:
                    7b:1f:88:07:a8:98:5d:26:53:91:1d:74:3c:77:ef:
                    2a:5b:b1:85:ad:b4:51:10:8d:b1:29:a1:c6:a1:e6:
                    86:d3:8a:f8:21:27:a8:e0:20:0e:9e:f5:c9:b4:1d:
                    d2:9e:4d:f2:d8:9c:6f:43:7d:ff:c3:47:88:5a:ce:
                    3e:05:77:a5:b0:f8:cd:66:5f:b9:4b:fd:7c:73:a4:
                    24:92:e7:4a:ee:95:33:c2:78:0d:3c:42:0f:77:10:
                    b6:8d:68:5f:5a:13:81:ea:8c:26:3a:d7:b9:16:27:
                    8f:5e:c0:4c:8a:88:e3:31:02:eb:56:ed:a8:59:42:
                    24:23:10:c6:60:e2:46:21:3c:70:96:dd:8b:45:2f:
                    54:0b:28:c4:54:8f:17:eb:3f:d7:71:54:62:67:c1:
                    6a:e5:8b:e1:87:75:2b:be:e6:e8:0f:35:40:68:cb:
                    27:46:b0:80:be:d0:90:86:20:10:63:8b:17:60:e3:
                    38:c7:0d:5d:33:99:46:a0:e3:c2:ec:7d:ba:59:aa:
                    7e:45:5f:55:4e:42:a5:0f:1f:e2:1b:3f:e8:8b:b6:
                    3f:16:3b:6d:48:b6:8f:10:f0:97:58:f3:01:ba:ca:
                    12:75:a4:8a:42:58:6a:d7:a2:86:db:aa:4e:72:e6:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:35:6E:F8:A9:CE:64:4B:16:68:63:A5:89:2F:3D:A7:3F:AF:33:11
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:aa:45:f7:3f:6f:2f:d5:f0:a6:a6:cd:8b:6c:eb:53:2f:
         aa:2f:b8:e4:2b:3c:b3:ae:0b:06:f1:ce:e3:09:36:44:da:54:
         e2:4c:b3:4a:81:95:dd:cf:ed:e7:f6:1a:8b:77:c2:e2:c5:74:
         22:18:80:96:8b:e7:98:ab:09:66:f4:f5:d4:1a:b9:b1:5f:49:
         90:57:9d:f1:bd:16:5f:84:13:f2:0b:d0:5c:dd:37:3e:a6:ec:
         45:79:8b:be:05:ad:41:96:51:d0:79:c4:dd:fd:59:93:c0:b6:
         f1:58:e2:03:b6:73:e2:c2:bd:c5:21:8e:1e:e6:98:34:0f:49:
         f5:b4:e3:3c:04:89:a2:0f:9f:e5:54:20:ec:db:cd:39:3c:b4:
         16:1c:b4:08:8e:c7:5f:f1:a8:26:4f:32:9d:fc:c3:63:11:1d:
         4b:2b:a3:85:aa:67:a4:25:46:8a:f4:ed:9a:b2:40:99:95:f5:
         a0:a8:26:a2:c2:e9:eb:e6:fe:51:d9:6d:72:0a:25:d3:0b:53:
         4f:74:c0:4e:3f:c1:bf:1b:16:b2:19:8d:d2:6c:9c:ec:22:0b:
         ae:1b:81:ea:c0:5a:dc:09:7c:6f:ae:24:ce:6d:d6:c0:41:b5:
         d4:f5:46:36:40:b3:c2:a7:53:7c:98:d1:a5:04:23:31:3b:da:
         50:c6:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----