Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          +BPs6/T8lwSPugblHYcnBf97WYl2pyySihZV7s8+moY=
Subject key identifier:   58:61:4C:44:69:F5:C7:28:43:E6:8B:63:1A:E2:2D:CF:8F:E1:47:F4
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       01962E991D2C45956E5D64DC6574C28EFB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: AJsr8ISUsRHOwHFhWo5AzsMpkmexmp9n8G82oa9XsbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:2c:45:95:6e:5d:64:dc:65:74:c2:8e:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=58614c4469f5c72843e68b631ae22dcf8fe147f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:69:4f:cb:a2:c2:eb:f6:31:1a:18:fc:c1:
                    d3:00:69:1e:cc:0c:4c:92:74:d1:f4:ff:a7:4d:4a:
                    d6:4f:4e:fe:e1:17:98:19:06:91:2e:35:73:db:6e:
                    9b:c8:dc:74:ac:fe:4b:5c:d1:08:ed:54:17:f2:ac:
                    e5:6a:48:a3:c4:86:1d:d9:56:c5:7b:eb:1c:d4:b6:
                    87:48:42:bd:c6:c4:ad:4d:e5:b5:7a:59:12:7c:ea:
                    39:09:9d:b5:cb:77:5e:04:50:63:1e:fb:6f:94:a9:
                    53:5e:14:52:65:8d:eb:00:65:32:5b:c0:7e:01:22:
                    a8:f1:ac:cb:c7:c3:3c:87:10:1e:b2:63:da:93:b7:
                    54:67:bd:8d:ac:10:c5:d5:61:ff:05:ab:da:28:61:
                    37:2b:dc:12:2e:ad:d4:79:df:2b:be:35:b7:f8:da:
                    19:49:87:31:68:56:2b:04:69:ff:42:b3:71:91:f6:
                    41:c0:65:9c:de:60:75:c2:cd:0d:7f:96:93:30:88:
                    e5:cf:76:4d:ce:ae:c4:9e:01:74:58:2f:19:1b:49:
                    ee:50:46:68:62:38:24:07:42:0f:b6:43:a5:46:48:
                    5d:90:0c:4f:76:10:86:9c:73:2f:b4:58:8e:3e:3f:
                    a6:60:9e:70:66:95:dd:65:0b:95:92:91:4f:58:ad:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:4C:44:69:F5:C7:28:43:E6:8B:63:1A:E2:2D:CF:8F:E1:47:F4
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:21:71:72:52:d2:73:3c:fb:1e:63:1b:f3:d8:7e:b5:86:
         c7:ac:56:09:b7:57:af:9a:bd:c8:fa:40:c0:4f:d7:8c:4f:5f:
         b2:03:c8:88:24:8b:9c:c1:f4:5d:0e:9a:d2:5d:9c:a5:ef:e1:
         be:53:be:28:0d:fc:84:0d:fe:a8:dd:98:f5:cc:c6:e6:3c:d4:
         fc:6f:77:b7:fa:0d:40:33:85:47:99:9a:86:54:0d:c6:d3:6e:
         d1:9c:43:d2:77:dd:82:76:f9:4d:27:6d:4d:8f:21:f0:c3:73:
         0d:1f:81:18:fe:fe:09:87:df:96:53:0b:13:40:5e:0f:fe:41:
         d0:92:90:0e:64:12:a4:01:8a:e9:bb:8b:a8:09:d3:da:ac:ba:
         63:dd:e4:f3:03:1f:fe:52:c1:8c:53:ba:95:46:3a:64:28:7f:
         61:5c:47:6b:e8:35:f7:eb:50:79:61:3a:fb:44:dd:ae:63:01:
         17:43:68:79:54:b5:68:d2:3c:e1:03:5e:61:5f:96:d3:09:7a:
         3a:9e:bc:71:31:29:c1:75:ef:ef:bb:fb:b7:26:8b:b5:dc:a9:
         a6:da:7f:33:97:5e:68:69:47:3e:ff:85:d8:07:26:37:65:ef:
         50:f4:fd:f8:21:04:be:cd:86:05:c9:90:a6:95:c3:0c:fe:3e:
         1e:b4:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----