Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier:          9BNQxwcIKq5PEZqpoo2PrEYwXLhpY550JoxffFNOy84=
Subject key identifier:   18:E9:66:59:A3:C4:EF:03:D7:34:6E:55:2C:F7:D3:DB:66:0E:E7:05
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer:       /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial:       01962E987D8427DBB2390B2E63DB373CC65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number:          0543
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: FKpyNmJKXVAO1I5ZDsn2IV6XYB5drpyOYAHR27ksbKU=)
                          2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7d:84:27:db:b2:39:0b:2e:63:db:37:3c:c6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=18e96659a3c4ef03d7346e552cf7d3db660ee705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:2d:a5:80:85:2c:87:06:66:9a:79:ee:1a:
                    23:d9:84:b1:23:0a:fa:cd:48:56:56:5d:c6:2f:a4:
                    e0:2a:97:1d:f0:f6:ac:7e:c1:0a:af:0d:fc:70:0d:
                    b3:2b:31:5f:37:3d:2b:51:c0:42:6b:82:d7:0e:26:
                    44:ae:20:71:94:4c:21:d6:3d:48:c2:95:4a:1b:f0:
                    bb:4c:20:10:e5:63:84:75:38:53:d8:ca:19:8f:78:
                    b2:c9:00:0f:dd:bd:6f:24:7e:c8:2c:69:1c:03:cd:
                    4f:c2:a8:17:36:05:63:73:69:bd:33:09:70:f9:80:
                    32:5f:7b:1d:eb:d7:df:82:3d:ee:47:7a:bf:63:e8:
                    89:7b:eb:dd:96:1c:6a:17:f8:2c:94:d2:37:ab:1b:
                    dd:fb:9a:f0:f6:67:65:a9:0d:81:a1:06:db:2e:cd:
                    70:4c:8a:af:1f:06:3c:7d:60:bc:f4:e4:45:d3:27:
                    bd:e2:5a:2c:c5:0b:bb:a5:a7:73:13:10:48:6c:92:
                    d7:ab:b8:9a:18:26:0a:fd:91:14:eb:6d:77:53:22:
                    1d:10:5b:65:01:25:7b:10:d6:87:09:58:d8:d0:69:
                    c9:40:a3:52:4c:cd:94:90:90:ba:67:7a:3f:56:4f:
                    14:fd:9c:7e:d2:8d:1e:09:45:74:0c:06:f3:68:ff:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:66:59:A3:C4:EF:03:D7:34:6E:55:2C:F7:D3:DB:66:0E:E7:05
            X509v3 Authority Key Identifier:
                keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:13:ad:f7:71:59:fa:d2:f6:28:6c:e0:de:bc:05:df:99:
         59:c0:ee:cc:67:ea:1f:de:c2:8b:e3:d5:a4:b1:52:9e:15:c2:
         25:74:d5:e3:20:05:9e:ce:94:d1:bf:9c:81:da:6c:2c:88:45:
         a5:eb:39:90:ca:78:b4:a5:8e:ee:eb:52:02:8f:ee:86:d6:61:
         fe:45:74:dd:99:1a:36:39:3a:c8:9c:53:4e:bf:c8:2b:f4:ef:
         b8:39:07:6b:a4:8b:e5:c0:f1:c6:6c:bb:34:dd:66:08:cc:9a:
         d9:a6:f6:47:fe:a1:4c:d2:7e:3e:42:ec:c3:3e:5b:aa:b7:24:
         59:99:44:29:bf:72:c7:b5:56:50:75:ac:ba:2e:f8:14:4f:fb:
         0b:77:f4:7b:25:b7:5a:a1:2e:16:19:a9:b8:2e:74:ca:c3:5b:
         1b:f9:6b:e5:de:c3:82:03:8f:01:da:c2:01:e9:a2:da:73:e7:
         eb:6f:24:0f:f4:a5:62:bf:d4:22:8d:21:72:d2:dd:36:34:f2:
         76:42:c8:c6:e8:0f:63:aa:48:ff:d3:d3:f7:b8:bc:50:19:df:
         70:5c:c2:7c:7b:41:a4:bd:b9:cd:35:b4:b4:b0:96:79:06:93:
         be:29:85:4f:da:2c:8e:06:05:a3:c0:b1:54:12:31:5a:cb:6a:
         b1:4f:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----