Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
File:                     frsTAxu1qUujKTO0JdyRUBYclSg.mft (raw, json)
Hash identifier:          k80ZiZmKZ/35Natc8qCLB4T/N8FBUKrAXgld8hFYTBA=
Subject key identifier:   6D:5C:03:43:38:69:D0:6F:B8:05:12:87:30:CE:9B:E2:86:89:C4:CF
Authority key identifier: 7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28
Certificate issuer:       /CN=7ebb13031bb5a94ba32933b425dc9150161c9528
Certificate serial:       01962E990F3B0562239058BC7D5D46363F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft
Manifest number:          014E
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: 1GrjD_MVlSSqPSOTstmSZn6OW-8.roa (hash: 0bCgzOJOxNfXuOJ/KwofBbHHt3oNngCqpnJt0zyGNL8=)
                          2: frsTAxu1qUujKTO0JdyRUBYclSg.crl (hash: 8MIizGvi4TNwipniVlJJ09pNy3a5Pj5OYABF9hTSglg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0f:3b:05:62:23:90:58:bc:7d:5d:46:36:3f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebb13031bb5a94ba32933b425dc9150161c9528
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=6d5c03433869d06fb805128730ce9be28689c4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:12:01:9b:5c:83:e4:07:04:dd:1c:ee:cd:
                    2a:56:48:2e:f0:68:96:36:41:c2:36:50:8b:11:b0:
                    46:08:ba:d6:32:be:31:1b:c4:c6:b2:fe:2f:88:b1:
                    2f:de:c7:0e:4f:b6:c2:ce:80:43:dd:3b:33:25:06:
                    78:96:b0:da:67:a1:85:69:9a:a5:31:40:a8:60:f3:
                    60:a0:c3:e2:a0:82:aa:e4:b4:a0:19:45:ad:07:51:
                    f3:f1:0c:6f:bd:46:5a:0a:40:df:24:c5:cb:0b:40:
                    4e:df:82:be:1f:69:2d:a9:bd:75:1a:dd:2c:6c:ea:
                    15:17:ba:58:2f:64:91:a2:26:23:b2:77:0d:7a:4c:
                    4e:f4:63:22:49:8e:69:dc:c5:ad:b7:3a:c3:4b:08:
                    ff:85:4a:23:b6:f5:60:75:a8:18:43:2b:93:5b:fe:
                    e4:f2:bf:d3:9e:c8:a4:00:ba:b4:2f:79:c8:71:a7:
                    51:d3:16:3c:ce:36:13:3e:cf:11:00:3e:3a:64:f1:
                    72:af:6d:3d:7c:7a:a9:42:aa:d0:e8:e6:7a:67:ff:
                    75:c5:f3:5f:1b:48:f3:d5:0c:91:d5:ca:9e:ae:39:
                    2a:09:66:98:93:e0:5a:b5:e3:2e:87:93:c1:70:81:
                    92:54:6b:e5:41:bd:bc:66:5e:6e:53:88:b5:a0:d7:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:03:43:38:69:D0:6F:B8:05:12:87:30:CE:9B:E2:86:89:C4:CF
            X509v3 Authority Key Identifier:
                keyid:7E:BB:13:03:1B:B5:A9:4B:A3:29:33:B4:25:DC:91:50:16:1C:95:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frsTAxu1qUujKTO0JdyRUBYclSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2efb68-ff0e-44c1-aaa1-ecb1f29ccff2/1/frsTAxu1qUujKTO0JdyRUBYclSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ee:f4:7d:56:ff:a0:bb:99:dc:a0:d1:42:44:b6:e2:97:a1:
         13:3c:d0:a6:6c:ce:1e:69:61:30:f3:b9:5f:ef:e8:5b:4b:e6:
         9e:24:08:dc:f5:1c:84:da:30:26:75:07:05:d0:b9:bc:d5:42:
         6d:76:5d:3c:02:b1:b1:fb:b1:62:b7:ac:0f:a9:30:73:8a:8c:
         54:6e:79:d0:6c:d0:72:aa:ea:83:44:cf:12:34:a0:04:ec:5e:
         d4:0f:32:da:2f:4a:d0:9d:c7:1a:b2:c3:f8:d6:87:08:20:02:
         97:7f:34:e5:b7:16:98:70:ab:9d:61:05:ec:b0:82:c1:6f:f9:
         d0:9c:4f:e9:55:07:2f:94:b2:b2:01:2e:ce:f9:b5:71:e3:10:
         5a:b7:b4:d0:74:93:5c:48:40:29:55:f7:7e:b6:6c:45:7d:ff:
         97:3a:ad:cb:45:0c:5a:85:b6:a7:f8:23:61:03:4e:72:6d:91:
         d8:2f:9b:0b:fc:1d:57:f3:0c:74:ee:0d:cd:15:7f:80:e6:4b:
         73:e8:c4:61:90:48:39:27:8c:d5:b4:6b:43:63:58:6a:3e:b8:
         e5:a9:15:3e:de:e9:8b:60:13:2a:4e:28:1b:2a:a9:d4:f9:cb:
         52:41:6c:06:76:a5:0b:a2:24:87:e8:52:a8:e1:27:a1:c4:3e:
         cd:a3:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----