Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          2QKL7FGqy/STnKLJr3kueLoG3P8x6lrPYyECEbs+yXM=
Subject key identifier:   8E:0F:9C:B0:B7:7E:14:FA:35:F4:F4:59:3B:E8:06:EB:5D:5E:76:84
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       01962E2B28B91F3FA69DC7C4358D17C19CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0632
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
                          2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
                          3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: ZPuUlhKFf9X7qrqoYfKkU03/0AxV43a0w+r1o3YjoAY=)
                          4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:28:b9:1f:3f:a6:9d:c7:c4:35:8d:17:c1:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=8e0f9cb0b77e14fa35f4f4593be806eb5d5e7684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:89:44:a8:7f:3d:8b:fd:08:b3:4b:12:4f:
                    79:9e:38:ac:79:2b:dd:60:45:8b:98:d7:e7:be:97:
                    23:d8:5f:ad:a5:28:7e:e2:5d:c1:29:80:95:de:30:
                    66:1f:6a:a3:07:ec:41:3c:ef:63:d1:ed:17:fa:fb:
                    24:86:e5:62:4b:e5:2d:9f:e5:55:38:74:ab:50:91:
                    ac:78:23:55:2a:4f:34:83:a7:87:fd:e2:0e:7c:33:
                    aa:00:bf:63:77:49:b5:73:13:7b:fd:90:a1:3a:82:
                    ca:09:7b:fb:f5:79:5a:1b:f9:f4:67:c4:18:04:a3:
                    7f:76:80:b4:e6:d0:9d:c5:d1:65:c5:bd:97:94:b9:
                    9c:a1:96:1e:c1:88:98:6f:80:5c:9b:84:ab:9a:d1:
                    3b:05:ab:40:ac:32:f4:30:01:b1:48:9a:48:3b:e5:
                    9c:bb:04:21:8d:21:23:c8:1e:16:d5:72:92:fa:75:
                    d6:a0:20:2d:a1:0d:d7:11:e4:4d:b4:4c:ae:51:73:
                    9a:35:83:ba:3c:e5:d5:89:ff:16:71:52:0b:2a:4c:
                    a5:ba:4b:eb:51:e6:82:98:e1:30:f8:88:19:c4:66:
                    21:bd:e8:d6:5e:73:2f:0a:8e:a1:bc:1a:6a:03:a8:
                    bf:ca:db:bd:40:c5:89:4f:23:50:db:9a:33:2b:65:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:9C:B0:B7:7E:14:FA:35:F4:F4:59:3B:E8:06:EB:5D:5E:76:84
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:a4:03:03:50:a0:fa:f2:1c:32:c4:0a:68:58:70:4b:ba:
         67:dc:e2:53:39:dd:7f:c4:82:65:d5:78:1f:d6:9d:32:f5:db:
         1b:43:2e:a1:02:5d:93:21:2d:6e:4b:2a:9e:af:9a:38:a5:89:
         33:45:30:60:46:42:45:75:05:94:2f:c5:61:d5:bb:b5:3e:55:
         0d:98:cd:5f:49:29:ae:d2:cb:fc:5e:62:8e:f3:7a:84:29:db:
         e5:a6:01:9b:54:23:63:48:e9:01:6c:c7:1f:07:a9:d2:6f:53:
         94:30:dd:7c:45:34:b9:30:6a:49:4f:90:4c:c3:47:37:5f:23:
         4c:78:5d:d4:49:89:3c:89:00:35:52:99:28:51:95:b8:75:29:
         29:f7:8b:61:d3:41:8e:51:76:b7:e0:5f:7d:2d:32:67:00:e3:
         ed:83:6d:8b:fa:4e:26:c9:c4:79:bb:c6:0a:0a:e1:ea:1a:63:
         5a:c5:de:72:90:9f:36:34:9d:4c:69:c1:cb:46:61:a8:14:71:
         6c:d2:bc:85:0a:94:da:c8:24:58:9f:cc:e5:d7:60:aa:f4:5e:
         6b:4c:63:3c:2d:aa:9e:52:8c:d2:88:a7:55:4a:03:83:77:f7:
         23:a2:3d:9f:04:a0:3d:6c:6e:f5:f5:ed:3d:1c:d9:f5:73:04:
         ea:65:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----