Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          pqZHqGNcZT9Ze6CLbhfnrkqzpZXoT7d74vmZUA2Lcfg=
Subject key identifier:   E8:C7:04:77:95:8B:B4:38:C9:EC:9B:C5:A8:7A:2D:04:D4:A7:A8:4C
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       01962E994C5C7695557F7907AADF5227C7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=)
                          2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: CKnc7G85DVMW0VZsXDdL2B9Ft1gGHTSqX+dEt3Ooz/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4c:5c:76:95:55:7f:79:07:aa:df:52:27:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=e8c70477958bb438c9ec9bc5a87a2d04d4a7a84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:09:b1:39:54:36:77:00:c8:a7:22:c7:01:
                    07:9a:65:cc:56:e2:43:18:56:0a:02:ad:2e:74:eb:
                    63:c8:4f:db:65:10:1a:22:2e:30:bc:85:dc:06:4a:
                    69:c3:24:ee:39:42:94:37:cc:97:17:db:15:c1:21:
                    5c:fc:f5:3a:48:dc:6d:c2:28:0b:e5:cb:8e:df:cd:
                    e9:07:47:2d:31:e3:04:28:bf:11:1d:72:a5:fb:40:
                    46:1a:6f:8c:f9:d3:1f:f0:77:b3:42:14:36:19:6d:
                    5f:82:c6:b6:05:50:b1:e1:7e:38:8e:a7:da:01:2d:
                    3f:6d:bd:2e:02:42:37:91:7e:93:f4:0a:9c:ff:ab:
                    d3:1a:35:7c:47:3a:ca:31:7f:27:59:6f:82:d1:6a:
                    bc:f5:72:6d:93:3c:9f:26:28:fc:c2:1e:eb:8b:25:
                    27:3d:d0:4e:a6:bc:4e:57:90:35:0c:9e:23:b4:4e:
                    df:4a:11:29:eb:ad:94:ae:b3:87:c3:e4:c5:04:86:
                    88:7f:9a:60:64:d3:69:d2:f5:7f:7b:77:60:0b:87:
                    b9:a0:cb:f2:08:0e:05:9a:40:a2:3f:4c:48:4d:ff:
                    dd:a7:d6:a4:1e:9b:c7:05:90:cd:85:ac:0e:12:1c:
                    c5:4e:1d:f4:e6:9a:88:72:60:0b:cd:f0:b1:c4:62:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:04:77:95:8B:B4:38:C9:EC:9B:C5:A8:7A:2D:04:D4:A7:A8:4C
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:d0:ff:94:89:9e:2d:72:bd:c6:07:a4:39:80:da:6f:0b:
         10:b2:08:66:1a:ad:bb:64:50:f3:ab:d5:bb:61:0e:74:1d:9d:
         c5:e0:33:45:1d:6d:01:5e:56:87:1c:41:23:6e:4b:45:57:e2:
         bd:3a:0b:74:5f:26:88:f1:cd:9d:f7:c0:cf:69:15:42:62:9d:
         7f:bd:ce:fe:1f:bc:c7:d8:b8:3e:08:73:e3:2e:21:f6:c6:8b:
         b9:34:80:ef:1f:c8:73:02:ae:55:2e:14:28:a6:78:e0:64:11:
         eb:be:87:f9:50:e8:25:da:4a:9f:69:52:81:7e:c6:93:b5:13:
         42:a2:15:ba:0a:2b:d7:4f:b7:be:28:76:33:21:3c:99:1a:27:
         6e:8b:33:a9:b8:9c:e0:6f:55:5f:14:9c:74:42:db:22:71:f9:
         b2:5c:0e:47:34:85:98:2d:d4:5c:be:c0:c1:7f:43:a5:11:03:
         ce:6e:9c:0f:d7:6c:eb:9a:43:2d:f0:f6:28:cb:5e:a8:4b:eb:
         90:2d:25:dd:a3:16:90:c9:83:02:69:6f:56:4e:8b:1a:40:3f:
         c9:45:e8:e2:b7:b6:88:3f:8e:96:fb:1f:0a:d8:0c:b3:4d:6d:
         ff:bd:36:b6:88:44:68:80:80:6b:ee:e8:49:81:06:bd:a8:a6:
         30:30:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----