Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File:                     feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier:          dxjvGNFyLyewFK1syQ8/1E01PtkOnyhqh9VSOMTIgVk=
Subject key identifier:   F9:F0:E4:49:56:1C:52:A4:EF:13:2B:2B:23:06:A0:0A:C7:84:9F:0F
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer:       /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial:       01962E2B3E8FD78DACAA13AC09E6280B3401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number:          7A
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=)
                          2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: 69gxqx1SeY2JVoue2K6iPnz8FG0sW8oamNaMv6AHgnw=)
                          3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:8f:d7:8d:ac:aa:13:ac:09:e6:28:0b:34:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=f9f0e449561c52a4ef132b2b2306a00ac7849f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:58:07:7e:35:ec:de:20:85:cc:c8:13:52:
                    27:d5:00:0c:66:d7:eb:98:53:39:d2:bc:4e:72:a6:
                    7d:50:2e:00:85:0d:ab:bf:1d:96:ae:1b:2f:dc:ca:
                    3c:c5:7d:ac:10:46:2f:d0:fd:c9:82:1e:f2:dd:53:
                    3d:65:63:5d:3a:4c:2f:7b:d7:a8:da:c3:cd:79:75:
                    2e:91:96:fa:fc:45:64:58:08:f7:72:e2:43:26:02:
                    f9:d3:a1:82:a9:18:76:a6:70:cd:19:12:cb:60:04:
                    3b:6b:f1:2a:15:11:a4:8a:46:4f:d4:38:37:94:ce:
                    29:61:39:13:b1:27:01:4d:9d:df:12:00:cc:26:2e:
                    a6:58:92:6b:f5:3d:3c:0b:73:3f:f9:aa:c8:f5:09:
                    86:29:4d:e7:a4:a3:64:62:b1:cc:db:54:78:f5:83:
                    1f:a2:24:5d:1c:82:74:4c:9f:82:dc:5d:43:e5:32:
                    42:ed:13:7b:4b:cb:2e:bc:ad:e3:66:0b:66:9d:14:
                    39:9d:37:56:5b:0a:8c:09:d8:cf:7b:4e:0f:03:e0:
                    2c:18:59:78:24:a1:66:e1:22:80:86:64:43:ca:3a:
                    1d:3a:00:dd:e9:a3:f7:2a:1a:14:65:86:45:f1:a2:
                    42:62:fc:0a:7f:27:9d:61:6d:bf:5f:d3:49:47:33:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:E4:49:56:1C:52:A4:EF:13:2B:2B:23:06:A0:0A:C7:84:9F:0F
            X509v3 Authority Key Identifier:
                keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d3:d3:c3:94:fb:54:d4:94:31:51:b8:22:25:7e:06:e5:00:
         cf:63:eb:3a:f9:69:94:bc:7b:92:b8:4a:cc:ae:a3:ea:7e:ca:
         d4:e2:0c:35:61:29:ad:20:6d:be:a7:c3:fa:5e:e0:b2:0f:6e:
         20:9e:1b:ea:d9:1a:d9:95:7e:47:8d:26:d6:4b:f4:65:20:d1:
         59:bd:ab:22:39:a8:fe:50:2c:e1:a6:7c:1a:18:51:1d:24:c7:
         66:91:46:6d:ec:10:92:29:0e:ca:96:b0:78:6b:29:ce:3e:13:
         0a:06:53:cf:2e:c7:58:1c:95:6e:a0:86:1d:1f:76:6a:99:78:
         f3:da:36:83:59:68:7d:54:47:11:20:80:11:45:4f:56:f6:54:
         09:78:a9:2a:bf:1f:65:08:ca:ee:24:20:a0:0d:44:22:e4:f7:
         be:8f:ec:06:dd:2c:63:7a:cf:ce:84:25:b8:df:5f:22:b6:34:
         72:61:eb:8e:40:64:56:84:c8:44:f5:b8:dd:08:ff:fa:69:51:
         7b:4e:08:76:f5:c5:8a:38:d6:92:f1:3d:3e:1d:e9:85:d5:0b:
         e6:3a:2a:fc:63:3d:09:a5:4a:74:ac:31:7a:b3:14:1f:50:ce:
         94:37:d6:cf:92:d5:d2:96:eb:96:c6:33:49:19:db:35:41:72:
         33:57:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----