Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File:                     1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier:          dDHGhW0G3L4U5k/mp+FrKbfyAoaJVsCOwtiVAdYVCnY=
Subject key identifier:   53:7B:37:F3:51:03:5C:7F:28:33:CA:A5:7C:11:10:BC:55:C5:FD:D8
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer:       /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial:       01962F06E8B83E5FEA153D018F82B85A41DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number:          0754
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: D6mYTVfcw9eUtUvIolq9MAjyW6W0qnzpjVIJiGhNAps=)
                          2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e8:b8:3e:5f:ea:15:3d:01:8f:82:b8:5a:41:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=537b37f351035c7f2833caa57c1110bc55c5fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:88:c6:c4:be:c3:86:ea:c1:1c:45:4e:3f:
                    17:e5:5d:ca:75:47:2b:f3:9b:aa:e4:0a:02:2c:04:
                    b3:80:e5:07:ea:b1:98:a7:e1:68:c1:0f:a0:a5:50:
                    13:6d:8e:52:20:8f:25:d7:c3:44:e5:3b:a1:23:4c:
                    6c:35:94:0c:a9:73:8b:64:ac:60:a8:18:e6:cd:af:
                    23:70:a3:e8:7f:6d:92:3b:04:61:8d:77:84:9d:73:
                    6b:48:6b:b9:d1:a9:26:84:12:d4:94:c9:9b:15:33:
                    5c:34:4b:b0:9c:23:bf:bf:10:ff:20:71:bc:52:e3:
                    4e:37:25:a9:48:f8:67:01:91:ed:13:99:32:ca:ae:
                    0a:7b:e5:0f:6f:e3:7a:38:95:e0:30:57:e2:13:d0:
                    b2:60:4b:17:cf:f8:41:5a:d8:f7:7f:7a:b6:f2:fe:
                    8e:f7:91:9a:db:d3:ed:1c:61:ba:1f:57:46:08:b9:
                    f5:03:25:46:f3:44:a6:66:1d:2e:80:0c:39:a2:ef:
                    18:a8:3e:98:51:30:9c:e0:67:b3:06:38:37:59:c7:
                    27:93:06:dd:9f:a6:d3:a8:96:9f:83:6d:57:0b:4e:
                    0d:41:59:21:92:92:ab:6e:8b:d4:5d:bd:c3:fb:fc:
                    64:43:35:b3:c5:22:36:d1:e1:cf:28:93:c3:ae:e5:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:37:F3:51:03:5C:7F:28:33:CA:A5:7C:11:10:BC:55:C5:FD:D8
            X509v3 Authority Key Identifier:
                keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a6:4b:d3:b2:10:13:ee:12:22:b6:01:9d:73:08:2b:91:c1:
         83:55:50:c9:0c:30:a0:75:75:d6:50:e9:77:d5:37:d2:41:40:
         65:14:22:2b:52:ad:0a:91:0d:51:1e:c4:c4:e5:0d:1b:69:6d:
         93:af:7c:a8:51:24:2f:b5:15:cc:7f:ee:ae:6f:81:22:9a:82:
         91:c4:f5:60:b6:6e:e0:d7:d3:af:30:a0:ad:d2:20:bf:4f:98:
         48:aa:72:6c:9c:35:18:8f:33:ad:e5:34:c4:2f:67:51:11:ca:
         d0:e2:14:05:df:88:a4:ca:0e:7c:03:a1:e5:51:4a:ab:dd:26:
         01:f9:42:96:82:29:25:0f:68:89:39:ae:e8:47:64:c1:5a:c0:
         dd:fd:01:f0:4b:83:b8:7a:d0:64:73:36:f7:ba:10:da:a0:05:
         bc:56:52:4d:fd:58:3a:04:a3:4c:8f:bf:f8:74:f7:20:3e:68:
         a5:80:b8:e6:f8:24:e4:b5:ae:a2:73:3d:96:b1:97:6e:11:7f:
         0f:5c:13:5e:26:15:13:8b:60:1b:b7:2c:f6:99:ae:70:d3:f4:
         a8:4c:c8:a6:2b:26:8d:a6:de:48:77:de:0a:b9:33:c6:f5:34:
         ce:54:b3:d6:f5:9c:23:9a:8a:f1:be:89:e8:bb:b7:70:ab:28:
         08:19:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----