Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          NYRnAyN791PKEWRHSE3zmXD6D3Jth403pxC34M62AiI=
Subject key identifier:   2C:6A:9D:0D:88:5F:D7:78:64:8E:A0:0D:77:E0:3B:2B:D5:08:40:91
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       01962F066C532D6FC0B9E72AF82CE2A6160D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: W9Hghc8zm6dI6hl6ue3SjAYnA3syQcvbrs6NIHXJNSU=)
                          2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6c:53:2d:6f:c0:b9:e7:2a:f8:2c:e2:a6:16:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=2c6a9d0d885fd778648ea00d77e03b2bd5084091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:32:9e:c8:ab:f3:90:33:84:34:98:1d:eb:
                    52:d9:14:fb:c7:62:a7:c1:7a:25:a7:8d:80:c5:25:
                    da:94:37:ed:98:04:6f:93:c8:16:ef:c3:34:33:cd:
                    82:f4:54:5c:51:5e:d9:c0:e7:14:4c:6f:7d:38:7a:
                    5d:ed:7e:00:79:16:98:2e:9d:49:d4:5e:a0:b8:ff:
                    f5:d4:9e:4d:c0:2e:ae:20:47:92:21:e5:75:68:a7:
                    6b:71:99:f2:e1:97:91:9d:f6:62:b1:0d:d9:b6:17:
                    42:8d:f8:6b:34:6f:a2:90:aa:bc:a0:3c:ba:d7:2d:
                    9a:ad:4d:51:f4:c4:94:11:31:f5:8c:83:e0:08:03:
                    0c:a4:59:c5:5c:e0:b6:32:d9:41:97:d1:ea:36:84:
                    a6:47:0d:39:54:57:cf:10:e9:26:a0:56:f7:7b:1f:
                    d6:a1:ce:20:51:f8:e2:de:a1:da:10:a7:b6:c9:c0:
                    d7:04:c6:b8:ad:c7:ce:fc:a4:c7:a0:2b:0e:f7:13:
                    6e:17:b3:b6:f5:6c:da:d9:eb:d2:c3:c1:d1:3b:4f:
                    e9:8d:67:fd:bb:fe:c8:e0:9b:99:5f:21:50:d8:27:
                    38:f5:85:fd:40:94:9c:53:42:50:94:7b:ce:d7:e0:
                    14:54:39:fa:32:b7:19:57:80:f8:20:fe:eb:69:a6:
                    42:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6A:9D:0D:88:5F:D7:78:64:8E:A0:0D:77:E0:3B:2B:D5:08:40:91
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6f:9f:9e:f3:4f:4c:9c:f8:40:38:2c:0e:37:ac:01:3b:7c:
         07:9a:26:e8:11:05:05:2c:7e:a6:79:bd:8c:ee:c5:ef:aa:da:
         00:3f:d4:47:b2:e9:a2:94:5b:95:74:7b:41:6a:7a:de:2e:85:
         4e:cc:1c:08:e6:fe:94:a0:d4:ff:ec:8e:35:13:35:dc:69:c2:
         65:d0:5b:68:e5:ba:1d:09:ec:10:bc:ad:03:d2:83:97:15:d3:
         5f:88:08:9b:0d:9d:f9:48:fa:e0:8a:e5:38:f3:02:9f:08:2f:
         8c:10:9d:51:52:da:13:cb:e0:ba:59:2a:87:e2:fa:cc:84:f6:
         2f:af:b6:99:85:a2:9b:33:a0:11:59:c9:1e:52:e5:4e:f7:e2:
         c1:10:04:66:63:25:76:38:cc:66:a6:ec:84:54:39:f1:45:7a:
         d8:da:5c:0f:c6:36:84:40:7b:c2:57:89:04:43:3f:36:08:77:
         d5:37:ad:3d:ed:d2:3e:ae:2b:b7:49:2b:74:3f:7b:6c:95:a2:
         62:81:09:05:b5:59:f5:ec:f5:f5:10:f4:88:ee:b9:f0:b8:73:
         2a:83:e7:0c:97:85:36:c7:9f:fa:64:5e:01:cc:46:95:49:81:
         20:5f:dc:0d:20:31:94:e6:a4:ff:b2:b0:63:a7:fe:82:41:d9:
         b7:86:60:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----