Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
File:                     FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft (raw, json)
Hash identifier:          iGvuPeREt0CrXcQ0vXa6QFQqRlMiJYGpGgtpefCjnFs=
Subject key identifier:   16:6B:BA:5A:F3:47:84:77:D1:51:61:B4:63:E9:68:F3:F3:77:99:D5
Authority key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Certificate issuer:       /CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Certificate serial:       01962F74C781E580AF507E150FF52FB95ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft
Manifest number:          0E22
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl (hash: RunbSTnFARP6sLElJRLjYAJOSD97YyGp7R8op1jbHO0=)
                          2: rDvgit_zW_J5sBeFSjvWxEfxGEc.roa (hash: Z69AN0vUaJQYCf1e5iHnzpJseConW5EmMiFzG056XPE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:81:e5:80:af:50:7e:15:0f:f5:2f:b9:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=166bba5af3478477d15161b463e968f3f37799d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:7c:a8:eb:14:88:4d:ea:59:a4:83:34:a2:
                    06:99:86:51:8f:a1:c6:84:d2:86:70:af:86:c8:95:
                    95:e3:c3:3a:99:6e:d4:e0:e8:a2:4c:a6:00:16:e0:
                    58:ae:bf:0d:9c:ca:2c:5e:74:f0:68:2a:6e:8f:01:
                    f2:c8:67:b7:f7:53:6d:60:f3:7c:af:13:39:88:83:
                    1f:5e:b2:7b:70:e4:3c:70:0f:d6:f3:0b:77:6a:6f:
                    08:59:fc:29:1d:7c:c6:b9:c3:d6:46:d1:11:9f:53:
                    08:34:7c:82:09:47:29:4f:95:93:86:9d:99:90:3f:
                    3f:8d:10:4c:46:ff:d9:49:d0:48:2e:18:84:4f:9b:
                    39:28:3f:44:1c:e6:e7:b1:10:cb:37:4a:cb:0d:17:
                    53:a1:9a:40:19:21:06:3c:07:66:43:7f:0e:c5:87:
                    4d:86:a9:cf:76:e9:3d:b5:4e:89:f4:9a:5c:1b:5d:
                    f5:30:d4:41:10:f6:f9:ef:2e:d3:2f:51:ec:21:19:
                    d0:0a:19:b1:6d:c7:16:e4:fe:98:47:04:e3:32:b5:
                    f4:68:b1:01:6f:c2:34:db:90:e9:5e:8b:b3:5e:04:
                    5f:30:72:ea:cb:f2:52:9d:3e:6f:8b:94:f4:2d:c8:
                    01:4a:30:4a:60:0b:f5:89:e8:48:ef:82:a1:cf:ef:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:BA:5A:F3:47:84:77:D1:51:61:B4:63:E9:68:F3:F3:77:99:D5
            X509v3 Authority Key Identifier:
                keyid:14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:dc:3f:5d:d5:9f:4e:ee:76:39:90:e0:25:52:2f:a3:78:
         3b:e8:43:ba:8a:16:35:0e:d4:82:2e:5e:3e:44:21:53:cc:2b:
         de:f7:0d:67:59:c9:0b:96:81:05:bd:84:87:2f:1d:5f:2e:a9:
         d3:c2:4d:ea:b7:cd:c8:f5:eb:8f:3b:61:3a:f0:9d:dd:2d:35:
         cf:07:ca:b1:44:ba:5c:24:46:37:17:0a:a9:56:d7:38:bf:83:
         b7:21:46:10:fd:f3:e7:84:ce:9e:0c:82:5b:59:a4:58:8b:43:
         e3:17:7e:21:92:da:be:f4:91:88:81:0f:c6:5e:c3:0b:3c:fd:
         8e:de:89:27:fc:66:d5:bc:df:b5:68:b2:57:8d:22:56:ee:32:
         c5:37:d4:e5:9c:d4:7c:45:1f:7c:34:9a:07:8c:b9:f8:fe:32:
         58:15:01:73:3a:6f:ee:5d:eb:c7:8d:a0:9a:a8:3a:cf:b2:87:
         f1:dd:31:4b:d4:3d:91:fc:2f:4c:ad:60:2e:3f:80:87:83:3a:
         d9:c4:14:19:c8:a8:10:e0:ba:63:bb:0e:05:4e:6d:ef:7b:c5:
         c6:f5:bb:0e:fe:19:3a:93:21:85:4a:5f:4f:35:00:33:87:5a:
         b9:04:ff:de:f9:53:1e:e9:29:22:1f:ac:8a:6b:b2:5d:f7:ad:
         2f:de:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----