Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File:                     _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier:          JbQ/KcXOGVN02bQVb5lK1vM4Ec9RfuFqLvXP7ahIAYE=
Subject key identifier:   AD:CA:E9:08:7D:AE:51:D7:0A:EE:10:45:19:BA:75:CC:A5:2A:96:38
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer:       /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial:       01962E9948CB2E50FE1541BEC5DD8382F9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number:          0256
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
                          2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
                          3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: t5nYyw8N7l5tGBqqmZeWjdl0bSpDgf+9qSrncdRlZ8w=)
                          4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
                          5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
                          6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
                          7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:cb:2e:50:fe:15:41:be:c5:dd:83:82:f9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=adcae9087dae51d70aee104519ba75cca52a9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:10:d6:a3:96:d6:61:a6:e5:15:cc:bd:14:
                    6f:9a:31:f9:cb:dc:a2:ad:cc:b3:0c:b3:58:40:2d:
                    0d:e8:10:40:09:b6:fb:95:40:10:03:3f:46:c3:83:
                    6b:fb:25:fc:4f:94:06:a8:0e:9c:53:75:01:2d:90:
                    02:9f:b2:c3:14:7a:db:e0:31:fd:98:4c:30:82:93:
                    ee:f4:ad:ab:69:59:4b:36:58:dd:62:45:9d:89:b9:
                    55:1e:66:da:e5:44:ef:5d:4e:09:a8:c0:b4:71:5a:
                    96:77:3b:1b:e4:8f:cb:fa:c5:fa:4f:ce:05:e7:d8:
                    1b:9b:66:ff:05:97:f2:23:ec:53:3e:ab:e1:eb:53:
                    b1:c8:0b:6a:0c:2e:55:00:0c:c9:df:38:d4:9b:51:
                    5d:1a:98:27:19:d0:27:39:44:07:91:78:23:ae:e4:
                    99:e5:ab:6c:fc:ea:72:7d:9e:84:08:58:d0:c1:cf:
                    d2:e0:50:9d:59:d2:75:f5:6d:61:ac:ed:97:fd:05:
                    d8:58:6a:bf:05:a8:48:78:cb:97:9e:58:ce:fd:36:
                    aa:6d:f5:2e:5f:3b:0f:ea:e9:18:88:06:e9:bc:bf:
                    d5:42:ca:7b:fa:3d:a9:ac:ee:33:97:55:aa:4b:92:
                    5d:e6:c3:64:0b:ce:51:c9:d1:2c:fd:5a:31:fa:58:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CA:E9:08:7D:AE:51:D7:0A:EE:10:45:19:BA:75:CC:A5:2A:96:38
            X509v3 Authority Key Identifier:
                keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:58:1a:17:e7:a5:6a:e7:09:1b:80:2c:60:b6:01:76:44:fb:
         b4:fb:92:23:59:a5:9e:f6:31:1e:8f:97:2f:3c:1e:d5:96:d6:
         50:49:a1:04:28:c9:6e:80:83:82:19:6e:62:3a:0f:5f:0e:f2:
         a3:f3:8f:86:cc:f7:31:70:47:a8:09:5d:08:cc:2b:e7:77:3b:
         9b:08:1c:25:e9:cd:c8:5f:d4:f7:45:c0:71:46:79:91:24:da:
         23:aa:f2:dc:02:ad:08:91:bc:ee:7e:65:63:5e:dc:b6:51:f8:
         7d:74:a9:e7:f2:80:4f:70:d3:38:1a:80:27:51:ed:c1:7b:7c:
         e3:3e:d3:d9:84:35:ee:9a:1a:8b:33:75:6d:fe:c4:63:86:12:
         28:ff:c8:03:19:76:4a:39:06:d2:0b:f1:6c:5c:bc:48:2c:65:
         c8:7f:87:6d:cc:1f:95:ba:61:82:f8:02:67:e2:96:b6:75:79:
         e4:52:0d:c8:23:4c:a9:e5:8b:92:ce:a3:e7:62:7e:c8:d6:d3:
         32:e6:f8:4e:09:0c:26:ae:75:41:b8:c7:ab:9a:71:9a:6a:ec:
         26:ca:ea:69:e9:a1:62:ae:d6:e0:ec:23:50:00:e4:a5:20:e8:
         81:06:91:cf:83:45:20:a9:6e:aa:8a:ab:12:2b:1b:32:12:51:
         45:07:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----