Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          xd9ey3XXQhjMgqLQjJtpAL0jTI4s96ZJ9FB07cJG/yw=
Subject key identifier:   1D:20:9C:74:75:6F:0F:37:0C:1B:F3:90:4B:06:86:5F:81:C6:8E:07
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       01962E986024E24331BA1495FA7E49FE7998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
                          2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
                          3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: Mfvw2R9+kivrJulONnt7nIXmIUK/6kxhKkKeoIPVmoA=)
                          4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
                          5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
                          6: mFp3zFR1T75g9VSJshunQuImDjc.roa (hash: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=)
                          7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:24:e2:43:31:ba:14:95:fa:7e:49:fe:79:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=1d209c74756f0f370c1bf3904b06865f81c68e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:2a:7b:89:04:83:75:fa:27:cf:da:87:ce:
                    ee:02:d4:27:9b:a9:ba:5d:15:d6:f7:a1:47:ce:da:
                    14:e6:cd:e4:2a:28:fe:4d:6f:fc:16:ab:15:29:10:
                    0b:25:b8:97:97:e7:05:7e:78:60:75:79:87:92:ac:
                    70:9e:ee:6e:e4:2f:0d:19:68:bb:a5:7e:35:95:68:
                    7d:e0:dc:25:f3:6d:f1:a7:be:03:1f:ce:04:55:10:
                    4e:61:55:75:90:aa:51:c9:7a:2a:00:17:e0:9b:f2:
                    ba:73:ee:e3:ca:e3:c3:5c:1b:09:7c:71:a7:56:29:
                    c0:73:e5:91:6d:2f:f9:c1:46:ac:b1:f2:da:f5:d3:
                    42:ed:06:db:49:0a:ad:6f:88:dc:f4:e4:1a:e5:78:
                    14:84:81:7a:37:0f:94:a4:df:17:c8:e6:de:b7:55:
                    d1:98:0f:05:2f:34:25:09:35:9b:7f:85:db:28:07:
                    e7:44:ba:87:d2:08:b7:e7:32:2d:10:d2:36:d7:31:
                    94:8a:1f:00:69:c8:97:34:ac:d1:b8:33:23:28:52:
                    5e:93:31:01:95:96:37:56:9f:57:99:55:53:3c:fb:
                    51:a4:e8:02:93:1a:45:da:58:d1:f3:a7:f8:75:5f:
                    5c:0b:d8:aa:a3:f7:da:b5:bd:1d:cd:37:8d:71:24:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:9C:74:75:6F:0F:37:0C:1B:F3:90:4B:06:86:5F:81:C6:8E:07
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d4:4d:7a:18:09:17:fc:fc:c4:26:df:f3:88:95:8c:fa:e0:
         01:66:d8:04:c1:ba:d0:da:52:c8:61:9d:60:68:b0:1d:a2:9b:
         3c:d5:19:21:26:6c:c7:3e:cf:83:03:fb:24:9e:91:f8:3d:99:
         dd:8e:ea:d0:b7:a9:67:6f:50:5a:d6:ee:01:a5:b9:60:03:66:
         3c:7b:b7:06:f2:b2:6f:b0:10:fd:68:5e:21:88:fe:c8:22:aa:
         b5:68:e1:67:64:07:03:f9:c1:9d:c5:2d:b5:74:fa:16:0b:c9:
         8d:3d:98:e1:8b:0a:52:5c:a1:81:78:12:7b:5c:d7:82:0f:e9:
         ec:4d:10:79:7a:cc:26:7b:9c:a2:07:9f:ac:1d:e5:d5:e6:65:
         45:a8:48:bf:40:f7:e8:ae:b4:af:c5:b5:23:c1:e9:aa:8b:77:
         94:a2:07:da:2b:6b:18:9c:4c:86:20:88:e3:f7:78:2e:63:93:
         ae:48:71:7b:a6:c5:db:5d:3a:79:93:f4:50:2d:94:ae:bd:37:
         c4:69:25:76:9f:a2:40:cf:43:f2:9f:65:e9:e6:b2:0e:65:31:
         61:2b:d8:3e:f0:87:7b:66:11:76:92:f3:bb:e4:64:96:67:4d:
         25:c1:91:49:e7:2e:34:73:ec:c7:5a:60:6f:97:a9:39:50:5f:
         f3:a3:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----