Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File:                     Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier:          cVB4dJz6RbAcjT/54S6sYBYxYJeGt/WXjhs9AGlfjmA=
Subject key identifier:   0C:49:0E:F0:2E:3E:02:FC:0E:04:4B:2A:BC:CF:1D:C7:5A:B1:98:19
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer:       /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial:       01962FAB55C3B6CFF0E322DFE4B63D583BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number:          0988
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
                          2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
                          3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: Z3SORJ0oRC5u4pP7f0qv0YaApnIohnZn8zpoWZBvifQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:c3:b6:cf:f0:e3:22:df:e4:b6:3d:58:3b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=0c490ef02e3e02fc0e044b2abccf1dc75ab19819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:28:30:66:0f:6d:f7:22:77:30:3c:41:02:7b:
                    1b:45:b9:b8:e9:13:9d:96:1c:40:14:44:c2:80:fd:
                    7d:8b:3c:76:35:39:d3:a5:e9:96:c9:d8:05:de:8d:
                    b7:dc:1a:af:3a:ba:3f:03:8e:f2:08:37:2d:f9:49:
                    a6:65:c2:dd:b0:8c:ef:54:1c:f6:bd:78:ac:51:db:
                    13:15:f7:bb:23:2f:9e:d3:4e:58:03:21:f5:ae:1d:
                    59:79:9d:7f:07:bc:dc:d4:ea:13:22:af:81:bd:ca:
                    b5:3a:25:e1:3c:f4:07:8f:10:10:2e:36:bf:7f:f6:
                    5d:46:3a:65:4e:d1:0c:6f:19:1d:69:86:d1:fa:9a:
                    41:d1:fe:2f:08:51:37:82:fe:dd:f4:2f:9e:40:d0:
                    c4:08:e6:d2:bc:98:d9:d8:8e:ff:bb:5d:12:35:a0:
                    b6:04:a0:73:2c:ac:c1:d0:93:37:fe:c7:1c:bd:90:
                    49:15:6c:ab:b3:1a:c1:f0:3b:7f:15:90:0e:04:b7:
                    c4:5a:30:42:89:b2:81:f1:80:89:31:70:24:35:8c:
                    87:40:ef:7b:fe:7f:ef:1d:9e:c5:52:cb:b7:b1:45:
                    0f:e5:e9:37:25:01:0e:f2:08:bb:f1:8b:60:07:41:
                    1b:b9:86:1e:7f:2c:1d:25:a5:f7:2c:76:45:ed:03:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:49:0E:F0:2E:3E:02:FC:0E:04:4B:2A:BC:CF:1D:C7:5A:B1:98:19
            X509v3 Authority Key Identifier:
                keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:59:05:5d:af:b6:37:6d:16:53:e5:4b:c2:b4:00:23:ca:
         4a:43:53:76:52:e5:1b:df:7d:4d:71:ee:20:23:4f:71:5d:12:
         8f:dc:e1:4a:3e:d1:fa:f6:50:ab:7d:88:9c:e8:7a:21:d4:c0:
         b4:db:4d:88:92:de:14:d6:1a:14:03:fa:ff:10:14:be:fc:d9:
         6e:4a:b0:35:0c:66:36:1c:46:29:cc:0d:33:9a:90:db:4c:35:
         d8:37:d3:ec:28:88:7a:b2:aa:6c:87:a3:25:39:cd:5b:eb:fc:
         41:3d:0f:5d:2f:0e:5e:21:13:a3:0b:30:d2:1e:af:c1:35:da:
         54:b5:d0:d2:a8:af:cc:51:6c:43:42:f9:7d:6a:89:5d:ba:1b:
         55:a4:78:f0:ea:dd:28:f6:0f:81:0f:ba:0e:47:cb:ec:c6:26:
         2d:db:f8:a8:6f:ed:5d:ef:31:d7:3c:df:32:a9:2e:9d:07:85:
         68:11:75:50:9c:43:81:e8:df:be:52:fb:5d:62:90:cd:15:3d:
         49:08:17:7f:57:b1:2e:9d:75:c2:7b:d8:62:6c:75:23:aa:13:
         57:68:f0:a5:8b:b3:73:69:4b:26:7f:64:f4:ba:56:6a:d9:a7:
         e0:cd:d0:d8:df:77:ec:5e:b5:be:6e:bd:d9:85:76:a7:d3:15:
         cc:ce:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----