Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File:                     pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier:          47VYy1CUToNhlAvr1R7No8UW075vU3UeZzuUULUGQHU=
Subject key identifier:   DE:AA:BC:98:77:0A:CF:66:BB:6E:40:81:0F:7F:84:4E:FA:DA:E4:35
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer:       /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial:       01962E98D85269A028A17E2FE6FE6EA84415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number:          1497
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
                          2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
                          3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: zoOhXwhHrPtxTRcNf/ZLEfGLVl1uGVxu8IogVc1K/vA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d8:52:69:a0:28:a1:7e:2f:e6:fe:6e:a8:44:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=deaabc98770acf66bb6e40810f7f844efadae435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:85:cf:fa:d0:5c:8b:d0:bb:5f:01:3f:3a:
                    65:1e:38:ad:01:1d:d5:00:67:74:e5:af:f4:47:cf:
                    4b:cc:90:1a:03:01:35:a8:14:e9:03:10:08:c2:20:
                    51:5b:92:c5:36:65:dd:6c:50:9c:ef:a4:ba:96:eb:
                    b9:de:a8:57:04:33:a4:3b:b7:68:46:50:66:e5:f2:
                    97:56:c7:d9:47:68:fc:04:d0:d6:6c:eb:ef:5f:65:
                    28:bf:2a:24:0e:cb:06:72:ec:81:5e:98:63:45:10:
                    b8:ce:a1:33:8a:ec:32:45:e2:51:c8:4d:f8:d0:43:
                    d9:d4:5c:ee:56:b5:69:4b:1b:3b:47:b4:ab:6b:3f:
                    69:8c:8d:e1:4a:67:53:53:85:1e:f2:be:62:82:ae:
                    0d:5f:d6:68:9d:23:90:65:e5:1d:bf:48:b5:94:9f:
                    cf:f2:3b:6b:ce:33:e9:a8:f6:68:5b:e5:44:87:12:
                    1f:d7:e0:be:92:40:03:89:2e:28:0e:ae:d2:d9:d9:
                    ca:f0:6c:aa:fe:97:8d:80:86:99:68:36:70:54:bf:
                    bc:19:64:b6:f2:f7:bd:58:b7:d1:c6:1c:b0:52:f5:
                    d9:a2:22:b1:26:f1:ee:43:10:63:55:6d:25:f3:9b:
                    cb:6c:8d:17:a4:cf:19:43:ce:54:12:fd:0a:d0:92:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:BC:98:77:0A:CF:66:BB:6E:40:81:0F:7F:84:4E:FA:DA:E4:35
            X509v3 Authority Key Identifier:
                keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:b9:d0:5e:87:b5:89:69:d2:6b:72:6a:3a:bd:c6:09:23:
         32:54:c6:f1:a7:13:b0:eb:5e:36:87:e4:74:ae:98:47:bd:14:
         8f:37:5c:3a:77:67:c7:be:14:4e:a9:57:e6:29:17:48:9e:d3:
         4b:20:9e:07:81:64:52:a9:5c:e6:e4:62:ac:6c:16:57:38:0e:
         97:75:2e:60:25:c0:53:3a:e4:53:1f:1a:6b:b8:3a:18:85:17:
         88:78:bf:be:4b:11:d4:cb:34:bd:42:29:99:97:58:0e:bf:c2:
         77:24:e8:fc:5c:51:9f:db:ed:c0:4d:d5:54:45:47:77:23:cc:
         f5:50:97:ea:c0:f3:8f:a5:a9:4e:61:ce:a5:8b:00:91:04:e3:
         38:c5:0b:eb:da:6c:be:3b:55:ea:94:f8:de:4b:e3:ff:0f:ee:
         a6:aa:ac:a5:b7:3a:95:7b:06:4d:ef:fc:ef:46:6a:8a:5f:c8:
         24:24:88:21:b9:5a:93:4c:68:9d:05:ae:20:7c:18:85:57:60:
         1f:2f:11:a8:a1:c4:7a:ce:d6:b9:0f:1d:f4:88:03:9f:e9:22:
         09:25:f9:0d:42:1e:cb:5e:c7:71:68:6a:43:fe:5e:59:63:a5:
         bd:89:7e:0f:c5:81:8c:46:a3:1b:f3:7d:9e:66:cc:98:ba:d4:
         aa:31:43:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----