Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File:                     fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier:          eGIzP9yzV7OdOvb3AZGD2i+83bLSNVFuAePA7lhwDWE=
Subject key identifier:   AC:94:FD:13:16:8B:9C:72:90:57:E2:69:14:88:64:5C:49:7F:0F:41
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       01962F3D30F6629854FF7756F8187977D35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
                          2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
                          3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: Z8Fb7mW4kncGkBt1WvgpLUSvd+N/j95VH/owXtyNwtY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:f6:62:98:54:ff:77:56:f8:18:79:77:d3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=ac94fd13168b9c729057e2691488645c497f0f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:60:19:70:fc:2e:ed:ee:ad:f7:38:87:45:
                    7a:e2:3c:b0:71:69:27:96:68:33:ea:7e:d9:f6:85:
                    b7:25:27:c0:8a:f2:8d:73:3e:df:00:67:8b:98:01:
                    b1:f1:93:64:b7:40:0b:55:a3:6c:85:18:82:49:e8:
                    60:4a:4c:ba:f6:aa:65:7a:a0:52:84:5c:3e:ac:76:
                    37:fd:57:43:a4:ee:8e:65:94:58:b5:fd:47:35:c8:
                    81:7c:91:a8:e0:4f:4d:da:72:54:44:6f:15:e4:31:
                    60:7d:11:d3:ce:9a:e5:28:e8:0b:93:9a:22:89:d1:
                    e4:c4:f7:7d:13:ee:09:58:08:b5:9a:2d:35:30:81:
                    f3:93:e9:89:04:60:25:00:c6:48:10:78:ad:ec:54:
                    a3:d2:f6:cd:07:6b:79:ed:19:af:8e:52:49:98:ff:
                    00:05:91:ed:24:7b:d8:d2:c9:fa:2c:d8:58:d7:9b:
                    c4:83:dd:e7:ba:6e:f6:97:51:ba:b1:23:d9:06:9c:
                    a0:5b:4a:20:d7:ce:0d:43:a0:0a:e2:cd:94:c0:25:
                    1a:cf:28:11:9b:74:72:74:6e:a0:ec:6d:ab:df:03:
                    ae:a6:42:07:80:cc:58:f5:74:2e:65:43:68:30:53:
                    ea:6e:e3:08:76:db:eb:c2:b9:99:6c:8c:04:69:54:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:FD:13:16:8B:9C:72:90:57:E2:69:14:88:64:5C:49:7F:0F:41
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:70:b5:12:2d:9c:dd:44:60:14:0f:55:4b:7c:63:12:04:48:
         c7:cd:69:89:05:8f:37:d5:6f:ab:6a:8d:64:51:58:7c:d2:d4:
         91:9b:5a:1f:62:e8:27:17:2d:f2:44:56:2d:fd:83:23:b6:49:
         5e:41:88:f1:d1:86:c2:b1:a3:60:f6:0c:0a:8c:10:ab:23:02:
         88:59:b8:c3:6e:77:9a:9b:53:73:97:f0:31:a1:2a:3f:d6:70:
         f1:e4:fa:fa:27:ec:fa:b0:58:f3:9e:a8:a6:84:7e:90:71:f9:
         20:dc:89:f6:ab:81:30:13:8a:79:f7:0a:6e:56:c8:09:1d:f8:
         f4:51:05:e6:da:13:f1:e3:52:8e:df:55:36:8e:fe:f7:29:c6:
         40:fa:6d:ab:76:15:25:b0:de:d9:5e:a6:ee:cc:5f:8e:71:15:
         ec:04:d1:06:e4:b9:0f:d2:08:b6:dd:12:3a:8d:98:64:59:a5:
         90:2b:36:ce:b5:d2:a8:13:d9:0a:62:1b:b8:a8:09:c4:f2:3e:
         42:62:e7:fb:7e:73:9c:00:6c:a6:c8:34:11:ee:84:94:dd:e4:
         13:6b:da:a7:08:62:f2:1c:57:8d:a2:23:fa:17:15:c8:e3:a0:
         dd:91:3a:23:6d:7b:53:59:c6:cf:30:1f:30:bb:5b:95:cb:76:
         26:f4:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----