Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File:                     448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier:          UrLyeME56FdGqbL4fUG+/h3ZwueL08pvZNFrrCCsTVM=
Subject key identifier:   45:F2:87:B4:CB:9F:2E:F5:D1:21:54:21:40:D1:60:C0:FD:5A:99:A3
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer:       /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial:       01962F06D9C6750AD78F2B468B2756CED897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: AGF/+bCeGk6Hu7nHGlhVVS5antHSvnhwrPonamxaGx0=)
                          2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:c6:75:0a:d7:8f:2b:46:8b:27:56:ce:d8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=45f287b4cb9f2ef5d121542140d160c0fd5a99a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:0b:66:b0:6c:02:38:79:d1:26:6f:ee:ed:
                    c2:ac:17:df:58:4f:8b:88:8c:68:8d:01:27:26:2e:
                    01:18:8f:dc:ea:57:e4:8f:5b:62:b4:0b:31:77:95:
                    79:d4:c6:be:d1:10:0c:c8:f3:be:72:ce:d8:dd:0f:
                    3a:35:71:94:73:49:f6:70:ae:68:1d:68:a3:55:68:
                    b6:60:f7:a7:95:13:7e:37:38:ba:39:39:54:ff:88:
                    3c:9a:f7:fc:38:84:a9:17:da:54:11:04:f8:b0:fc:
                    c3:88:07:44:d0:ca:5d:16:42:87:0f:78:d5:7f:48:
                    5a:9b:42:5d:ff:d4:b7:c1:37:bd:53:0d:a9:87:f5:
                    25:ae:bd:e7:d9:9a:41:46:58:ff:25:2f:cc:09:7e:
                    fd:60:96:c6:58:37:ed:5e:85:34:b9:30:3a:f3:fc:
                    fb:39:41:5f:90:ed:56:11:11:87:0a:7c:e2:7f:3f:
                    30:59:61:a0:ad:63:19:8c:a9:08:0a:0f:a1:d6:d4:
                    ba:b9:9c:81:3e:c2:8a:20:e5:4e:d3:39:6b:0b:09:
                    9a:ff:91:60:76:43:e6:b1:de:c1:93:4c:18:ed:99:
                    d0:66:72:11:5f:dc:ae:8c:0e:f4:d0:d0:31:5d:07:
                    69:8c:ef:13:b8:2e:e6:3b:89:af:ce:f2:48:8a:40:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:87:B4:CB:9F:2E:F5:D1:21:54:21:40:D1:60:C0:FD:5A:99:A3
            X509v3 Authority Key Identifier:
                keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:64:f8:bb:1f:81:fb:6f:a2:25:d0:f2:c6:53:13:33:58:
         08:50:0d:49:ec:fb:75:8b:43:bb:9f:58:53:9a:51:71:f4:4f:
         b2:7e:2a:88:cb:3b:a5:60:81:a6:60:78:2e:c8:d7:47:49:42:
         db:21:56:41:c7:dd:4c:52:3b:d3:67:d5:74:b0:f2:b9:a3:b3:
         dc:8c:0c:b9:7c:b2:9f:8e:55:8a:d4:91:2f:ae:4a:d1:de:b4:
         a2:93:8c:71:7d:90:37:1f:0f:cc:12:04:09:76:fd:21:02:8b:
         dc:5c:eb:12:22:80:1b:bf:bd:f3:ba:27:a1:77:56:4b:d1:00:
         dc:4d:67:13:97:1e:7d:88:cb:97:16:7a:44:13:8d:87:59:1f:
         4a:1b:47:b7:7c:b2:e3:67:fa:c7:c0:c0:84:76:8f:1a:de:fc:
         41:e0:b7:14:f4:79:05:28:b4:ab:14:58:d8:87:e7:fb:6d:5a:
         f9:dc:b2:f2:e5:82:4c:5f:24:e1:6f:f3:3d:e2:d7:47:74:80:
         07:78:d1:1a:8b:77:46:41:60:de:38:8f:00:d9:a3:6b:78:60:
         34:7c:8c:e3:97:9d:f6:7c:be:dc:c9:52:3d:7e:92:cc:49:86:
         98:d8:ff:48:41:62:e7:92:ca:04:a8:da:fe:c8:78:69:eb:f0:
         60:f3:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----