Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File:                     _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier:          IlzoA+vCmVjd/8yv2FzYzcOKByx8OW5SYXtmyWZNg+g=
Subject key identifier:   3D:F4:DC:6C:65:E8:10:37:58:3F:AC:82:54:F6:C1:F9:EF:70:71:2A
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer:       /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial:       01962ECFAF9EA8D674854086CB704D78C9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
                          2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
                          3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: jay9wdX2643xWmGfDj1E9EC/nn4MpPYtIVhPCwjXehw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:af:9e:a8:d6:74:85:40:86:cb:70:4d:78:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=3df4dc6c65e81037583fac8254f6c1f9ef70712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:62:93:79:17:fc:80:62:36:c2:7f:73:2c:
                    c7:58:a9:08:4f:27:20:2a:7a:ff:14:9a:a0:2e:b3:
                    23:18:39:af:10:d8:36:92:9e:c4:f2:47:ce:8c:5c:
                    c6:d9:82:a5:5c:87:bd:4b:49:d1:30:3b:f1:b1:f4:
                    b3:6b:61:7d:e8:50:cb:90:32:a9:dd:58:cc:90:16:
                    31:25:18:dc:f5:a8:06:87:16:56:2c:19:23:00:0c:
                    ea:f1:1c:c6:d3:8b:68:dd:c3:cd:5e:f9:63:53:54:
                    80:81:93:62:92:3d:57:23:5a:8e:e1:fb:af:d2:4c:
                    e7:7a:9c:6c:98:a7:7e:71:ec:0f:e0:9f:74:02:57:
                    5c:76:4d:64:a9:ac:48:b5:2a:a0:57:9d:9c:ab:51:
                    28:2a:44:9e:f0:20:7a:f9:8e:b0:74:a6:db:24:80:
                    2c:9a:37:7d:a1:88:a4:ba:c1:52:0b:8d:d2:43:53:
                    36:79:b8:ed:c1:b6:ee:36:b5:e0:4e:4a:19:9b:ed:
                    72:0e:cf:cc:04:85:de:5f:6a:ac:95:01:06:3b:92:
                    22:f9:16:e3:6b:36:7c:c7:71:22:2a:1b:13:20:d5:
                    36:60:25:e5:8f:10:4f:78:1f:70:60:63:25:cc:98:
                    86:61:c2:2c:c8:cf:27:18:6f:02:aa:69:c2:aa:83:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F4:DC:6C:65:E8:10:37:58:3F:AC:82:54:F6:C1:F9:EF:70:71:2A
            X509v3 Authority Key Identifier:
                keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:20:4a:b7:11:47:cd:66:a8:01:c8:bc:b6:3f:78:ec:72:
         92:97:b3:9f:ee:60:70:46:15:5f:97:70:91:c8:8b:55:3c:59:
         84:84:c1:f5:b4:95:54:58:a7:95:fa:61:64:43:03:a7:16:2b:
         92:be:08:ba:cb:66:ba:d8:ff:bc:f8:75:57:08:ac:ed:82:dc:
         47:47:29:11:d8:ab:70:42:4b:ed:e0:65:ef:6d:e0:1b:28:67:
         84:7a:62:04:07:ac:1f:17:94:31:0d:6c:26:90:de:65:6e:78:
         ae:c3:ea:b2:33:72:6b:18:2f:de:ee:b7:4d:cd:c3:5f:00:22:
         a2:0c:3c:a9:bb:d1:20:b9:eb:48:8b:c3:e8:f1:a7:3d:ea:8b:
         dc:67:f6:cb:55:20:59:78:a6:71:b4:ad:9f:ba:36:1c:92:d8:
         96:f4:12:1f:cc:c1:a1:ef:6c:a0:fd:37:a9:6d:9e:ae:e8:64:
         ae:86:06:38:b2:89:a5:dd:d0:c4:0d:a6:8e:66:2e:43:5c:79:
         db:c9:36:e2:d7:8c:ac:be:53:39:10:7c:df:0f:cc:ab:48:e6:
         62:52:e0:df:c5:49:7d:72:8a:7a:7c:50:49:25:55:b3:59:e0:
         56:e6:b4:d7:01:ac:7d:90:92:75:c5:97:68:ac:8d:36:cf:67:
         62:67:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----