Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File:                     R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier:          dxeeKnijliUxhGlLwZV16d1tdwICzpAsK1W0lbWlD+w=
Subject key identifier:   02:D3:C2:A8:C7:3D:1A:15:30:60:D4:6B:5A:DB:CB:24:94:FE:50:DC
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer:       /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial:       01962F06A313AF651F498ECAB9FB4F28C141
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number:          14AB
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: ivUczgxs2WyXwGEhH52ttfTFpldVKbYFMFYY3J4QSIg=)
                          2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
                          3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:13:af:65:1f:49:8e:ca:b9:fb:4f:28:c1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=02d3c2a8c73d1a153060d46b5adbcb2494fe50dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:db:31:46:8c:1c:8a:2a:00:25:6c:88:34:
                    fc:89:48:91:09:00:f9:8a:fa:70:e7:8a:92:5e:e3:
                    2d:ee:e5:95:0b:5f:6b:06:48:44:f2:42:cc:bc:40:
                    9b:e8:75:00:76:29:a7:7d:1e:57:c9:2d:fb:33:16:
                    65:f6:dc:fd:87:70:ab:6d:a6:7c:bb:a0:f5:4e:ae:
                    8e:1b:b9:60:08:9d:d9:ec:09:02:cb:f2:ee:8f:9c:
                    60:48:f3:87:67:ca:8e:8b:86:d9:e1:9f:66:ab:26:
                    23:11:69:16:e9:cf:b0:1d:48:f2:78:2f:0d:f4:36:
                    6d:3b:db:7b:41:57:a5:0c:f8:c3:3b:02:26:ad:75:
                    75:65:8b:ae:a9:4f:c7:3a:05:c9:5d:4d:e9:f9:a8:
                    ad:e0:e4:47:97:54:41:3e:9c:47:51:ba:18:02:b0:
                    b9:af:c6:b2:3c:84:9c:42:fc:e9:8d:18:ac:e1:30:
                    49:45:ee:33:96:8c:31:e1:f6:a5:7f:1f:a6:c2:48:
                    fa:47:a4:13:aa:7f:5e:97:05:17:22:d3:a4:a7:55:
                    f5:be:38:96:cb:1f:88:63:f1:f1:16:2c:dc:72:a8:
                    df:a6:c2:6e:44:92:f7:be:6a:19:fe:4d:e7:ae:89:
                    4c:c4:d8:94:bf:2e:6c:68:45:da:e6:fc:83:ce:ba:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:C2:A8:C7:3D:1A:15:30:60:D4:6B:5A:DB:CB:24:94:FE:50:DC
            X509v3 Authority Key Identifier:
                keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:b7:7b:af:6d:a9:b8:bc:ca:9a:78:bc:80:16:2a:3e:26:
         e5:8f:1a:24:ee:3d:b2:88:bd:41:a8:38:0e:5c:27:b7:8e:5c:
         ad:28:ba:08:42:a7:43:67:e4:d8:64:a9:03:2a:2d:54:70:eb:
         88:12:42:46:22:9c:3a:76:97:78:12:10:ec:1a:a1:55:03:b2:
         e0:7a:c4:18:27:8d:f7:bc:3e:1e:b8:1b:f3:e0:f8:16:24:52:
         98:02:6d:fc:ae:eb:29:62:a5:19:2e:d1:3f:a4:d7:71:f2:68:
         04:10:00:6b:b3:b9:c2:8b:ed:5d:88:7e:75:a3:2f:d1:80:30:
         72:5f:7b:db:80:ec:3c:95:8d:8f:9f:98:0d:62:c9:c0:df:75:
         3d:87:e8:c6:0a:c4:12:54:bf:d3:72:1b:ca:71:d6:8c:a9:2c:
         7c:9a:e5:77:d7:db:12:cb:90:86:5a:ca:81:2f:c3:06:b4:93:
         f9:06:51:ad:15:63:b7:c5:22:39:11:4f:32:58:52:8b:c4:6d:
         08:76:21:12:b6:51:a1:ce:de:72:5a:fa:2e:1d:e4:53:9e:8f:
         e8:30:f5:89:bf:87:64:f9:d6:d2:f0:52:c0:15:56:12:aa:22:
         8a:b5:f0:b0:b6:53:40:42:21:ea:2d:95:e4:28:9d:78:d8:e7:
         30:d1:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----