Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File:                     veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier:          DNayh0sw7P4cjB6Q3n+0Pv+Q0NXzQzdl6qJL47DsaO8=
Subject key identifier:   5F:55:13:B7:EE:F1:DF:36:AD:14:82:3F:35:9B:A8:BA:9A:49:BE:B5
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer:       /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial:       01962E2B1987B7ADB4B576E6DACFEE7E29F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
                          2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
                          3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: XMmoUdGg4PKGVvztls1CDufRKtUPeBmh8lIKxBwHn70=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:87:b7:ad:b4:b5:76:e6:da:cf:ee:7e:29:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=5f5513b7eef1df36ad14823f359ba8ba9a49beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:66:73:9f:8f:66:5b:f5:9b:d4:41:08:52:
                    bf:3c:39:26:e4:df:40:b8:e4:54:39:81:7f:24:aa:
                    d4:2d:f1:e7:a8:b5:67:8d:f6:a1:19:e8:9e:9f:ed:
                    48:8d:4f:52:d7:71:c8:2c:14:76:d7:85:dc:3b:d7:
                    cb:47:70:eb:4b:44:49:82:a9:97:43:1c:3d:d2:0d:
                    93:a3:c5:4c:f1:03:e1:a4:ac:3d:98:d4:0f:41:e3:
                    1b:32:13:fa:34:c2:3a:0b:32:e5:05:e2:3f:f0:a8:
                    6d:3a:12:22:50:cf:58:ca:7a:32:b1:c4:75:f8:6f:
                    fd:19:b5:41:65:6a:dc:96:71:42:69:cf:11:f3:2b:
                    03:34:8f:ec:44:0e:f4:1a:dc:df:d1:6d:26:69:70:
                    0b:46:15:ba:6c:74:fa:a0:58:50:f7:5a:97:0c:58:
                    cf:74:75:c7:7f:f5:62:4f:a4:6d:dc:bd:e8:6c:79:
                    66:e4:9b:9d:19:b2:55:75:06:2b:a6:5d:1c:05:66:
                    88:77:8d:6b:3d:50:46:82:44:e7:24:cd:cd:f8:89:
                    56:6c:eb:4f:36:d5:2a:ba:87:3b:26:a0:a4:01:19:
                    87:14:a5:cc:e0:d7:c7:f1:8e:ad:40:32:fa:5c:ca:
                    61:da:60:fd:e0:7e:c0:af:b8:87:0e:56:90:71:fb:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:55:13:B7:EE:F1:DF:36:AD:14:82:3F:35:9B:A8:BA:9A:49:BE:B5
            X509v3 Authority Key Identifier:
                keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:63:ad:f2:5c:df:0b:dc:a8:c1:d5:df:68:b6:2a:e5:6d:89:
         d0:14:02:53:89:bc:bc:bc:29:fc:54:89:50:07:18:03:ab:0f:
         26:17:2a:af:84:c9:0a:21:a4:7d:2e:2b:17:13:6e:33:a2:f9:
         16:dd:ee:08:9a:ee:b0:89:c4:0b:ac:11:7a:7a:2b:94:91:95:
         0c:8d:c0:cc:b0:52:10:36:c5:8a:06:32:c0:5f:1a:8a:28:8e:
         6b:21:7b:f9:b9:c7:2f:6e:12:2e:ae:15:5a:65:48:61:d4:85:
         88:b2:be:07:84:0b:7b:f9:ee:2f:26:38:cf:48:e0:f3:68:99:
         81:a0:69:79:d0:25:e2:b3:a6:f3:a5:29:6e:ed:54:d8:08:d8:
         cb:36:29:dc:c6:e7:1a:5a:47:39:aa:f5:89:32:69:26:c4:d0:
         07:e3:a5:c4:00:07:77:3b:04:12:65:27:de:69:98:fd:36:11:
         34:d2:e4:a0:11:d8:52:74:d0:56:2f:7c:a2:bf:c6:55:3f:05:
         93:f5:e3:79:93:2f:bd:a1:5b:d4:33:cd:bf:90:90:1c:a9:95:
         00:b2:0e:fe:02:1b:8b:63:1f:f3:53:d7:67:6e:59:fe:72:84:
         42:82:41:0d:ee:6f:43:0b:d1:b1:88:2f:d3:e9:44:d3:a2:56:
         73:7a:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----