Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File:                     Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier:          7Y0RvWdxu05OSMWlfkIjY5cncyXAzZq1rcP6PCAFqCM=
Subject key identifier:   48:40:92:77:3B:6E:0D:C9:C5:5F:8A:00:3D:A7:A4:1B:AA:A7:F7:65
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer:       /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial:       01962F3D7B6E302D464EE06B03FD3347F2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: jo2T+ue+LdDZreVu2OL57mxPc+bObqk2c9OGn6yf4yI=)
                          2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:6e:30:2d:46:4e:e0:6b:03:fd:33:47:f2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=484092773b6e0dc9c55f8a003da7a41baaa7f765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:3f:93:bd:dc:41:a6:87:a6:d8:56:80:46:
                    a9:e9:f7:4f:cc:e6:90:8c:81:23:1a:38:42:b3:5d:
                    a6:3e:d0:06:63:40:46:09:75:12:67:01:05:5b:de:
                    46:fd:d9:4c:4a:6b:49:39:90:79:db:68:ef:2f:e7:
                    15:f3:93:65:9e:0f:8b:5d:2e:af:86:0e:02:f5:90:
                    69:27:e4:bc:01:ef:97:9f:8d:5d:83:92:97:77:eb:
                    76:a2:a4:93:3d:75:88:77:d0:71:a1:79:6b:39:36:
                    24:fb:d8:0f:1d:dc:0c:20:71:04:7c:bc:ce:53:c7:
                    f8:27:4a:00:7c:46:fc:ba:37:32:21:14:af:2a:52:
                    ab:12:54:41:b8:e3:38:bb:98:58:d0:41:cf:43:08:
                    44:35:73:5b:20:5a:e5:0e:29:9d:68:04:f3:0d:56:
                    e8:02:11:9e:47:8f:e0:b0:39:e2:63:d7:17:a9:1b:
                    0e:64:b0:43:3d:3d:9f:e2:66:04:0d:81:d6:06:f6:
                    5f:d1:89:fe:f2:4e:96:fe:11:e3:46:2c:1a:e7:2e:
                    54:48:4f:3c:16:4a:1b:60:51:95:17:55:78:68:dc:
                    29:8f:38:a2:a4:aa:1c:5f:1b:69:6d:33:88:a8:a0:
                    c1:38:f8:0b:9d:a9:2d:a9:da:f6:65:d6:e4:75:b9:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:92:77:3B:6E:0D:C9:C5:5F:8A:00:3D:A7:A4:1B:AA:A7:F7:65
            X509v3 Authority Key Identifier:
                keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:56:50:92:97:97:77:79:92:91:46:fb:a7:f7:20:7f:9e:81:
         11:1a:e5:1a:08:20:37:c9:08:5a:1b:be:47:ee:8e:84:3b:1e:
         5e:48:22:8e:df:c8:e3:96:d7:7b:b5:de:4f:bd:2d:51:47:66:
         51:8d:89:bc:84:43:dd:ad:d7:f0:4a:ff:da:b8:33:7f:6e:8b:
         85:9b:8f:b9:e4:39:87:e7:24:95:6b:39:8a:88:1e:d8:51:84:
         f6:16:22:a1:66:eb:dd:77:f4:a5:07:0e:08:37:df:14:5e:e5:
         4d:cb:31:cb:64:15:df:91:88:ac:fc:05:2c:15:38:fe:38:cb:
         a4:ce:b9:f6:80:3d:83:8b:b1:16:6e:12:fb:1b:f0:a3:de:f6:
         2e:c1:65:d8:63:b1:2e:db:af:2b:96:4f:86:36:54:5b:a1:bc:
         5f:b5:e0:f2:f5:73:3e:5e:cd:d0:56:c5:7e:82:7e:18:86:0d:
         5f:c4:ef:81:f3:29:48:46:04:2d:03:ce:c2:31:29:ff:52:33:
         d3:07:12:5c:96:01:bf:17:a4:c6:ab:19:f8:74:b9:20:1d:55:
         43:29:3c:b1:a2:1b:67:7c:36:7f:20:d3:e4:9f:03:60:c0:89:
         b1:53:55:0f:0a:92:d5:f0:4c:e5:0f:2e:cc:6c:2c:d6:77:06:
         d2:b4:b2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----