Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          d689wCVms3m6HJXnQMuKgtgz1Z+eoE+PLFRItjTzQ84=
Subject key identifier:   83:E8:5B:5B:0E:09:14:B2:EB:13:6F:AB:B0:CD:AD:44:C1:60:37:95
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       01962DF425F435C564EF69C33B95B7324AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0947
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: KTYZQTlWjP9XQr0e3LhtXCLEZ_k.roa (hash: CsqMd7Sxcfm0IJ/aHqrJgqjKNt4MhZmVIfUNZE3N5tY=)
                          2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: cEvNOZUe0jl3mClhp8V0ehHIqHcYomv914rvPv6YnpU=)
                          3: bMp6LhjX_DQYqzbuh4qqh4UVOHI.roa (hash: jCA1g3hgiFCuBXGyn+3jtJrn1UnxVU+QNRS9iBmqdrs=)
                          4: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
                          5: wJc546Vd9TMcAYPMIgqQji2Iy4I.roa (hash: hGmeq5PZRe6Atb7rVMBXn1UFmQB2jejPXD5/XmKxL8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:f4:35:c5:64:ef:69:c3:3b:95:b7:32:4a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=83e85b5b0e0914b2eb136fabb0cdad44c1603795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1b:bb:c6:2e:31:aa:75:2e:80:c9:d4:55:74:
                    49:3d:87:58:85:86:e9:ab:40:53:00:68:31:df:58:
                    01:fa:3a:e4:bb:82:31:14:4c:c4:39:9a:46:ea:11:
                    ce:9c:20:86:e3:53:3e:8f:06:d9:7d:5e:dd:eb:5f:
                    b8:46:e9:34:33:35:01:3d:e7:91:f7:f5:54:7f:29:
                    0d:2f:15:e7:92:82:ea:98:ef:b6:c2:44:d5:87:87:
                    56:25:a1:eb:41:e2:1d:62:b5:b5:f3:07:53:f1:2c:
                    16:b7:ad:e1:69:43:49:e1:fb:81:35:e4:60:bd:d6:
                    9b:a4:be:ea:f5:83:f0:7b:4a:2e:0c:71:84:f2:55:
                    87:3a:ab:6a:a9:36:b0:fd:c4:3a:65:8b:d4:a5:9a:
                    1f:6f:f4:9a:41:28:24:e0:d8:12:01:31:8a:6f:5f:
                    0c:65:0c:03:24:c8:b3:54:66:23:ae:2f:19:ed:a1:
                    d5:8c:d9:25:9e:41:c7:ac:78:a1:00:2c:11:d1:4a:
                    0f:fc:9a:56:b7:ea:1d:1d:e7:ee:b3:b8:38:2a:eb:
                    53:5f:70:40:f5:c4:c5:33:66:2c:61:5a:59:74:2b:
                    2a:86:23:34:e2:ae:6e:f1:4a:1e:83:f2:32:5d:09:
                    05:e8:e2:7e:15:af:44:f0:78:a2:cd:11:93:99:81:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:5B:5B:0E:09:14:B2:EB:13:6F:AB:B0:CD:AD:44:C1:60:37:95
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:2d:2e:0b:4d:5f:b4:fb:83:e9:ba:e2:68:c3:d7:fa:dd:
         27:43:fc:0c:ae:f9:de:1f:50:9e:b2:95:97:c3:56:f3:7d:69:
         b7:f2:8d:d6:fd:76:f8:7c:72:ad:f9:bc:12:3f:39:5e:15:9c:
         a6:f5:a7:14:3c:b5:99:66:3d:6f:e9:13:dd:e2:7a:fa:97:e8:
         94:6e:1a:d7:bc:b2:7c:b3:16:fa:19:1f:a0:32:13:43:8d:28:
         ff:91:9b:f3:6a:83:dc:fa:18:97:58:de:68:4f:3b:8c:41:9c:
         68:df:25:4d:34:dd:49:bf:8e:9f:d3:b6:49:b7:5e:d0:7e:31:
         a0:d6:0a:5f:76:03:5b:1a:2d:56:62:93:ba:c8:3c:c4:e7:b6:
         6c:20:4e:1b:f2:b6:81:95:43:32:5b:ae:b2:a0:66:99:aa:0c:
         9a:48:6b:76:54:6a:b6:b0:da:f7:32:b8:47:99:ac:a6:64:c7:
         f3:8b:8d:d5:74:2f:95:90:36:05:b8:a1:2e:42:18:d9:75:3d:
         1a:66:3b:83:bf:e4:89:62:cf:9d:e9:10:4d:b4:b1:7e:c9:89:
         f7:27:84:fc:a1:cf:ac:c5:9d:c0:c2:03:3f:1d:8a:16:34:e6:
         ad:72:31:27:f2:f0:ad:7e:a9:96:04:51:38:2f:e6:88:4f:36:
         ee:a2:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----