Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File:                     I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier:          LGewOEaqMjmupR7JbAMy2gJ0BIIBgSXFCjHC7eSrZtA=
Subject key identifier:   93:95:52:B5:1C:8A:AC:A2:51:AF:2F:E9:0D:16:04:42:B9:AD:D4:11
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer:       /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial:       01962F3D7B30D7763A812F6DB6050CFA86D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: g5DD2B9sttU2a6xCl2ASdT+P/vWPe9L1pBtBRVw+2TI=)
                          2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
                          3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:30:d7:76:3a:81:2f:6d:b6:05:0c:fa:86:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=939552b51c8aaca251af2fe90d160442b9add411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:4a:8b:72:cb:d8:6e:65:80:3e:a1:27:d6:
                    01:10:7d:4e:22:4f:70:c6:ae:94:05:80:d5:38:35:
                    9a:46:6b:cd:a9:2f:ad:c8:17:c6:d3:00:fb:32:d7:
                    2d:ac:52:39:a9:6d:43:cc:d4:47:4f:56:f5:29:1a:
                    f2:6a:d6:31:5c:ce:38:99:d5:09:92:38:da:df:4e:
                    e4:b0:2c:61:d6:d6:1d:29:d2:49:7a:48:f0:b6:32:
                    25:0d:e1:bd:2b:cf:9f:34:8b:c3:fc:a2:46:3a:b2:
                    ed:3a:41:75:9e:91:01:40:b3:1b:a4:06:10:bf:b7:
                    3c:f5:53:a1:e9:1d:93:77:0c:b6:d5:c4:33:de:67:
                    1f:d8:7c:36:cd:6a:b5:62:10:7b:c5:1f:53:fe:05:
                    72:e8:0f:77:04:d7:a2:0a:dd:d2:4f:1c:93:bf:8a:
                    34:b9:80:2e:cc:49:76:c8:03:da:87:ce:f2:06:73:
                    0b:46:ec:f8:8a:d7:36:ab:97:7d:79:bd:02:58:ca:
                    22:09:d7:46:5d:65:06:ae:93:a9:c4:4d:66:a2:c8:
                    16:2d:83:06:01:32:eb:31:e5:7d:61:f6:d6:3d:a6:
                    53:55:e5:47:07:9e:8b:41:ef:35:51:f7:17:a6:b5:
                    37:48:08:32:91:34:cd:d8:29:bd:e1:35:50:01:45:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:95:52:B5:1C:8A:AC:A2:51:AF:2F:E9:0D:16:04:42:B9:AD:D4:11
            X509v3 Authority Key Identifier:
                keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:b6:40:df:7d:12:36:9e:64:8d:aa:06:8e:d6:a3:21:84:
         f4:fb:33:17:9f:eb:0e:4a:61:9f:cf:83:0a:82:a6:50:07:35:
         e2:5f:e0:c1:fb:81:29:84:d7:93:a5:cd:bb:25:f0:67:39:9e:
         34:08:fa:bf:2b:5e:bf:cf:24:14:38:bc:17:45:1c:7d:9f:08:
         56:b9:03:d8:11:6b:89:26:24:79:6a:8f:57:d9:a4:05:43:20:
         d1:48:d0:de:01:d3:b7:fe:af:be:6a:2f:ab:30:c7:15:4d:60:
         80:86:07:3a:d7:8f:95:fc:60:1f:66:fb:62:d8:de:85:9d:cc:
         45:57:b3:42:94:8f:8a:5e:d9:dd:36:c1:f2:41:1b:e8:0c:8b:
         fa:00:9c:ab:cb:e9:03:be:7a:f6:61:39:93:e0:e0:6e:9e:9d:
         6c:b5:54:83:cf:4e:02:89:47:4f:70:a1:e3:a1:07:54:44:23:
         f8:7f:90:40:e4:d7:9e:cf:30:44:af:5d:86:2b:0d:64:2d:ab:
         ca:c6:9b:91:6d:3f:10:7b:41:ae:8a:60:e4:b8:d7:77:2e:d8:
         fc:fd:20:40:de:10:98:03:fa:73:a5:c6:13:11:da:be:05:5f:
         da:06:f9:97:63:26:c2:d7:a2:2c:ca:49:92:11:40:87:52:95:
         0d:4b:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----