Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          ENLa53OvDr0PCRsB9Z1pTElXy4yCF7g0PhmdBkRgSgg=
Subject key identifier:   C8:9F:F3:98:9E:81:F0:97:09:18:67:9B:B8:AB:34:E2:35:79:93:7D
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       01962F06C1948CBCDF50B7FA941F31BC59FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: U51DgVRj8qEsvYKCm4C97U6uffuZhtwLouSZRpkTMJ4=)
                          2: IC8rrkeuZ3TqcdV591D01mfbwHc.roa (hash: 7tBT71N8NPjqdd9xF1vrNPm9jbI3kLMX+SeUrC9ethY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c1:94:8c:bc:df:50:b7:fa:94:1f:31:bc:59:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=c89ff3989e81f0970918679bb8ab34e23579937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:76:8b:5a:7e:5f:51:e1:55:ae:bf:3f:46:
                    7d:0e:b9:67:70:56:20:0a:d9:69:c7:c3:cc:f0:52:
                    f0:0c:ec:a0:ab:d0:03:2c:f6:97:6d:85:b4:7f:56:
                    a4:0b:fe:e2:e0:ac:56:9e:7a:22:4b:e0:99:95:2c:
                    2e:68:bf:52:18:fc:18:b8:ab:24:78:ec:dc:8f:ec:
                    99:21:a1:b2:df:1e:57:02:f8:e9:12:6b:d4:62:32:
                    6c:bf:90:f3:60:06:44:2e:ac:a6:3e:08:96:46:c4:
                    83:bc:d8:7b:2a:40:43:28:9d:11:d2:16:ad:f8:2c:
                    77:ca:22:2d:ba:9e:ed:23:3c:10:bf:93:2d:93:e4:
                    1e:5f:9a:62:c4:90:01:cc:64:7b:d7:4f:e1:a7:a6:
                    53:5a:df:f1:d4:58:a6:45:48:05:0d:c9:64:e9:8f:
                    1e:c7:50:35:54:f2:3d:c6:61:7d:85:ac:df:8b:fd:
                    d3:1e:0c:12:5c:70:2f:c6:38:c8:c6:d0:67:66:68:
                    54:51:d3:f6:0a:70:b0:e6:4e:a7:93:20:e7:de:ed:
                    fe:dd:b9:ee:48:74:67:34:3c:97:24:e6:02:2b:5d:
                    82:8f:e6:38:a7:f8:c8:1f:98:2c:f1:7c:f6:4c:0f:
                    03:3d:e9:4d:b9:fb:96:c5:56:a7:e8:8f:64:9f:f4:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:F3:98:9E:81:F0:97:09:18:67:9B:B8:AB:34:E2:35:79:93:7D
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4a:0e:53:9a:46:c4:af:4d:aa:50:70:07:f8:b9:8d:c3:60:
         92:59:bd:fe:8e:63:71:88:9f:43:fc:0e:d3:67:9f:52:6e:b8:
         da:8a:4a:45:15:4b:49:95:54:10:6b:04:33:ad:bd:8d:4b:2b:
         b8:01:22:17:9a:37:86:9a:07:eb:f9:fe:cd:68:9a:4a:7a:d6:
         70:17:d7:6b:95:48:b1:ea:29:c0:c4:0c:f8:35:b1:c6:34:3b:
         d8:56:2f:ff:5f:70:c0:05:57:37:4a:f5:49:08:3c:26:16:61:
         70:75:b9:c9:41:e0:9d:33:4b:da:0e:06:25:77:90:7f:7a:43:
         e2:5d:bd:38:42:b6:f5:c8:99:e1:be:a9:9c:4a:02:c5:7e:5a:
         db:a8:7d:3f:60:4c:fc:97:23:0b:da:47:de:95:05:98:9d:ef:
         be:74:8a:74:a1:69:21:a0:f6:5d:79:3c:81:5a:9b:1c:f3:21:
         9a:26:aa:54:6e:62:21:a8:93:8b:8f:62:d2:0f:c2:d0:f9:68:
         3e:bb:b3:a2:4d:6c:f2:a4:e7:b4:5e:ca:9e:a9:ae:8b:99:19:
         98:6c:3f:68:72:cc:f4:1e:4e:6e:81:03:ce:38:38:02:8c:ff:
         75:20:a1:bc:b1:48:24:7a:81:bf:07:16:ea:92:70:3a:64:e3:
         65:8f:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----