Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          q92ZudtrPO8deE1iGmMzm1ysEtv8flvf709mmip14lA=
Subject key identifier:   FE:DC:88:F3:BA:0F:09:A3:7F:42:83:FD:E3:70:51:D5:20:3B:72:DF
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       01962DF3CCF711D28BA4DA5192FCCE15BC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
                          2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: VyVyH6gSKWyfnkEmRtUZdmdUVU4C5xlfSvUJ0MTZiJ8=)
                          3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:f7:11:d2:8b:a4:da:51:92:fc:ce:15:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=fedc88f3ba0f09a37f4283fde37051d5203b72df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:56:17:ad:f3:7d:45:ca:09:a1:ee:d7:64:
                    32:f2:79:87:1f:db:55:2f:a2:56:85:c8:1e:64:b8:
                    22:ab:0c:14:0a:bd:3a:59:c1:ec:05:2f:26:aa:ba:
                    99:10:93:0d:87:99:c7:5e:9e:c8:79:50:6f:32:20:
                    a4:28:32:cf:ad:9f:34:a4:d8:e9:c2:42:8b:a7:f2:
                    dc:4f:5d:0f:0f:1d:c1:b0:51:7b:11:8e:75:68:d1:
                    6b:ac:a8:65:95:da:c2:cf:71:f5:1f:3b:bd:40:64:
                    48:bf:4c:ee:10:54:bd:d2:9b:7a:ec:b1:51:6d:77:
                    63:c3:38:9b:a9:95:20:af:b2:a6:49:23:6a:f0:8d:
                    1b:3b:b2:8c:6a:29:73:ec:d1:df:ca:7c:4d:83:ba:
                    c2:80:63:e7:a7:44:79:f9:97:e6:ae:39:3c:22:b7:
                    78:88:8f:cb:11:60:f5:6e:1b:3a:44:ea:54:77:db:
                    ea:d7:ac:e3:70:0b:f9:b5:8c:80:3f:41:35:3a:b8:
                    a0:e5:46:6b:c0:67:6e:8c:f7:cb:6e:c3:68:41:61:
                    7e:96:15:b8:4b:88:4e:97:73:d2:c9:82:25:bc:d4:
                    27:de:7d:07:48:2c:f7:12:22:cc:c5:83:b0:24:7f:
                    f6:c2:1c:3a:68:f5:28:23:da:84:4b:3a:8b:20:4e:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:88:F3:BA:0F:09:A3:7F:42:83:FD:E3:70:51:D5:20:3B:72:DF
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:85:50:fc:18:50:22:28:96:70:28:d5:d8:1e:98:fb:fa:11:
         48:dd:56:09:4a:25:fa:30:e9:81:83:76:49:9e:36:cd:a1:3a:
         12:97:b8:d9:da:df:be:6d:f5:ab:f3:5d:65:33:06:63:be:a9:
         9a:1f:69:4f:ba:f8:68:9b:08:c0:f3:6d:75:0a:c0:65:c2:bf:
         c2:22:ea:f4:6f:14:23:62:91:95:ee:f6:95:88:3b:ec:9a:41:
         1a:33:55:72:1e:36:ff:d5:67:84:b1:26:5a:86:de:8a:22:36:
         e5:a7:03:52:de:8b:98:17:b5:07:ee:2c:69:94:7c:a6:54:86:
         12:c3:36:d0:44:0b:aa:3a:85:a4:d2:75:9e:4b:e6:f2:12:f0:
         fd:71:b0:dc:95:2a:e8:74:2e:fc:f4:61:3f:c8:1f:f5:3d:a8:
         c4:4b:7d:f4:44:49:3a:5c:9d:36:f0:65:af:02:95:fa:7c:5e:
         c8:fb:17:77:4d:b5:2b:03:d0:51:ab:35:a9:df:08:26:68:10:
         cd:73:a2:c2:d3:fa:4a:a1:4b:ae:de:48:d1:e8:ee:27:02:85:
         a9:48:9a:b2:8e:69:e1:c7:95:9c:4e:af:fd:53:61:76:49:e4:
         20:38:e9:68:05:3a:80:6f:47:7d:c2:70:85:d8:b7:16:5a:f1:
         13:fa:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----