Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          tRWDPUt8ythj5OFPfte/VUgJyxQrwJZGEklOGDIfxl4=
Subject key identifier:   C0:44:BA:8D:9E:48:F3:67:C7:CC:79:54:1F:89:0B:5D:88:89:42:11
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       01962E61CC839C0646535B4B813AC4DA38BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 1gktZR41lM7jL9DWPWwIpWV6M78.roa (hash: HJiBs8EKqMUy6AK9Z/fItBE1opDLfro1xaIJHGboLfU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: B/B6FXiU5ZP9pZGngzHi8riesI1qqwOvgnsxDfvvua4=)
                          3: kUIltMqyJJ6z_MdFBE4UK_gpE0M.roa (hash: pWOc8zM/cAP0pnHrLKIMmGeqVgPcNsErRAC9f0Wl2a4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:83:9c:06:46:53:5b:4b:81:3a:c4:da:38:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=c044ba8d9e48f367c7cc79541f890b5d88894211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:39:02:3f:08:b5:15:5d:16:d4:31:72:cd:
                    5a:0e:23:13:19:83:c9:06:55:b8:34:ff:9a:02:35:
                    8f:6d:47:f4:12:1f:e4:ff:e8:74:64:91:1c:5d:26:
                    1c:c9:04:ab:a6:c3:33:2b:c6:3f:95:bc:2c:e9:b3:
                    6c:5f:7e:34:f8:5b:e3:8b:06:75:d3:0a:7f:7c:9b:
                    0d:b8:f1:44:2f:cc:fd:c4:5d:73:54:18:bd:d6:3f:
                    ce:9a:7d:4b:ef:aa:c6:00:68:11:75:6e:a9:e6:7d:
                    67:d2:0b:7f:a4:a8:96:e4:de:c9:84:fd:85:28:05:
                    0e:01:b2:4f:37:ce:9f:55:25:42:7d:c3:32:fb:b9:
                    28:1b:67:17:af:27:f1:f4:f7:c6:f2:ec:64:62:7b:
                    dd:6b:73:3a:fc:d3:bf:59:0a:27:9f:94:0e:70:73:
                    bd:c1:6b:14:93:b3:ac:38:73:b0:1e:f1:64:22:ad:
                    8f:67:46:14:90:95:cf:31:91:16:bc:2d:15:de:30:
                    46:12:c1:f2:a9:5c:1c:95:00:1b:fa:14:d4:13:e9:
                    61:cc:62:90:09:da:07:94:bf:68:a2:4b:72:94:ba:
                    c3:84:c3:5e:4b:bf:54:f0:d3:35:5e:ee:b7:c3:b4:
                    20:6e:d2:ec:6d:f8:79:4d:cb:63:e9:20:08:63:6b:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:44:BA:8D:9E:48:F3:67:C7:CC:79:54:1F:89:0B:5D:88:89:42:11
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:95:25:d9:f5:c7:69:54:35:16:86:1f:68:b9:68:5d:37:
         50:77:fd:4b:e2:d4:f9:98:e4:66:22:1d:02:f3:a2:ce:25:95:
         27:7b:2b:9f:98:fc:c6:0f:5e:5a:79:cb:7d:b4:a7:66:8e:7b:
         cf:29:5f:16:67:ba:c4:39:33:5e:28:9b:0c:10:b9:73:f9:73:
         98:8b:1c:76:25:06:4a:01:2f:e2:95:78:93:87:17:79:a4:62:
         7b:76:ba:8d:aa:7e:ec:45:08:ab:7d:b1:32:4d:32:b4:6d:f1:
         af:27:43:e9:67:c6:06:c7:68:fc:c5:0d:21:24:ff:8a:b4:a5:
         76:37:a8:bb:bb:c4:b4:d3:5c:c6:a8:4f:61:2c:75:7c:97:e6:
         48:c7:70:58:12:09:bd:1f:a4:43:34:0f:cd:b0:3c:fc:0c:dd:
         ab:6b:80:f6:46:d9:0f:1d:d0:c4:78:5e:db:e1:8a:84:20:c7:
         95:da:45:87:64:a1:28:25:a1:26:82:c0:cf:21:10:62:d2:e0:
         c6:48:7d:d4:b6:66:bf:82:6a:b3:11:a5:84:2f:c1:0d:2f:53:
         c9:39:e1:62:86:1c:f2:86:c1:8c:21:e5:b9:1f:04:b6:5f:80:
         92:a4:d8:1f:fa:de:2e:1f:f7:c6:52:58:6f:21:f6:08:9c:a8:
         f1:66:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----