Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File:                     Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier:          E2tzgq3f9EhvfKPUbd9DoPqh+1j1LBSCbQBQiOdvC+8=
Subject key identifier:   C5:84:D1:E1:5F:B5:8E:51:72:BB:DA:B0:9E:B2:43:B7:1B:34:F7:26
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer:       /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial:       01962E2ACED8E119DD32DAA465A4D65ACE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
                          2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: j+1IhZymtTLxJxcGhPJGlopoOQ3qua2H3QG5605yimY=)
                          3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:d8:e1:19:dd:32:da:a4:65:a4:d6:5a:ce:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=c584d1e15fb58e5172bbdab09eb243b71b34f726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:98:26:dc:9c:38:65:be:0e:10:af:64:47:
                    4f:fa:26:d1:40:63:a2:19:33:a1:90:f3:c3:9a:a7:
                    16:66:33:6f:83:06:8b:59:44:c2:db:25:92:ba:66:
                    70:0b:ca:fa:bf:8b:a6:bb:62:0e:98:37:8a:4b:7f:
                    88:88:79:12:c2:35:df:1d:30:21:1b:97:c9:53:5c:
                    6f:cb:89:99:ea:3c:08:55:c9:64:8e:33:16:2d:e8:
                    5c:b6:63:6d:e4:e0:11:28:3e:b4:5a:ce:9e:51:3c:
                    81:79:dd:30:0d:3a:41:3b:2a:af:a5:40:d4:ce:ba:
                    34:3c:b5:06:74:70:a7:dc:01:ec:f6:e0:cd:fc:e7:
                    eb:83:b1:62:1e:b0:fb:cf:1b:c1:13:b6:c3:1d:93:
                    03:83:4b:c6:71:71:0a:5a:18:bc:3a:eb:54:c1:3a:
                    1b:4b:50:5d:22:9f:6a:6d:a8:0c:ca:33:cc:5c:18:
                    1d:d2:27:0e:1b:0f:4b:5b:07:3a:1f:0d:c3:8e:66:
                    c0:ee:64:59:72:69:3b:ec:d9:1d:87:c6:17:0b:90:
                    04:54:fd:bb:2e:68:fd:fd:27:02:ab:33:cc:61:d0:
                    08:99:8a:45:65:46:7b:33:ab:36:3a:b1:86:15:a6:
                    06:67:25:7f:36:86:87:d5:f3:71:fc:dc:3d:06:af:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:D1:E1:5F:B5:8E:51:72:BB:DA:B0:9E:B2:43:B7:1B:34:F7:26
            X509v3 Authority Key Identifier:
                keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:61:21:7f:95:51:87:8f:5f:27:55:af:9c:b2:20:53:95:
         82:77:c8:bc:a6:38:e0:6f:7f:2e:9a:66:69:e2:0e:4a:a9:2b:
         cd:f3:67:a8:6c:ba:59:57:be:29:2b:bd:6f:5d:ed:3e:77:0a:
         1a:e2:ad:44:0b:d5:c3:ab:99:2a:49:22:bb:49:ce:f2:81:41:
         f5:14:cd:24:0d:b1:60:dd:54:e3:6c:58:38:61:8c:aa:7b:7d:
         ec:39:cc:18:9d:c8:a9:12:68:6a:31:c6:c4:d4:34:41:ac:5f:
         50:7a:3a:b1:5a:08:a3:1d:19:3a:52:32:63:82:a9:61:6c:1b:
         eb:c5:f1:54:ba:94:61:7b:82:f5:82:b4:bb:60:ac:e7:3d:05:
         18:8c:cd:72:b3:9c:76:f0:68:84:95:5b:a7:04:f0:b8:ca:e6:
         f7:60:df:10:44:61:dc:ea:d3:d8:00:50:de:00:14:20:f1:de:
         fb:1a:83:c3:c1:d4:80:95:d9:be:0b:cd:09:3c:e4:3b:e6:b7:
         15:0d:ba:7b:09:51:7c:a4:26:b7:37:7a:1c:96:d1:f0:f8:ef:
         4c:2f:77:2e:6d:cf:65:e0:fa:15:b4:9f:55:21:bb:2e:81:87:
         7b:dd:6c:bd:dd:7f:ec:3a:25:ae:4d:c9:e8:3e:af:76:bd:0d:
         d3:19:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----