Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          XqaNaDaDPjp86QqwcbWbXy7Mw61l6/5hMwMqxmnhLDY=
Subject key identifier:   6C:BB:83:E4:62:9D:8D:34:11:86:7A:C3:D1:58:57:51:A3:29:9A:1B
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       01962E99B6AB9735EDE5477546FCA19B11AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: 5Kusd4x/y8Y1Zi1J+Xl/ks6VRgc3UUoyKxK9bpjgwEc=)
                          2: vUK0PWq2rYFX03NpI4glIwcP-yw.roa (hash: 7OmubHi4XYVC0tzd37LBLN6Yy8bTQM8VhrxlC/dBHqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b6:ab:97:35:ed:e5:47:75:46:fc:a1:9b:11:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=6cbb83e4629d8d3411867ac3d1585751a3299a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:f0:53:c1:6e:ba:58:9b:c5:85:73:2f:67:
                    0b:39:62:3d:36:20:f3:41:a6:c4:80:b1:c6:c2:36:
                    2e:05:27:99:23:90:4f:d6:6f:7d:1a:a7:50:9a:3c:
                    60:f8:7a:4f:d1:03:2e:25:ed:4b:f4:28:76:f1:47:
                    64:0e:07:01:d0:fe:70:34:b4:d6:d6:e4:ff:0b:a4:
                    25:d9:0a:69:fd:83:26:96:93:29:2e:d9:30:ae:1b:
                    2d:af:cd:f9:99:35:21:32:44:8c:c4:98:67:d0:c4:
                    f2:27:56:91:57:47:12:74:d7:99:20:dd:f2:5c:12:
                    8f:ce:10:68:70:d4:32:6d:94:da:cb:a4:85:4a:83:
                    c8:11:ea:45:b1:a5:5e:f7:e0:7a:d6:61:3d:66:a7:
                    dc:53:77:17:70:7c:e0:3a:ed:9e:af:06:0b:f7:28:
                    2a:62:3e:84:d4:d6:6d:52:1a:40:04:74:33:aa:61:
                    40:09:e1:07:45:93:8d:ac:5b:df:d5:5a:f8:a0:6a:
                    9e:6c:4b:64:eb:bd:90:39:05:14:3d:50:b3:a2:fb:
                    c7:c0:68:47:fc:9b:d0:a3:8e:0e:3b:53:37:3b:3e:
                    ea:8f:35:81:94:e1:ef:49:b0:c9:5d:ee:43:bb:33:
                    d9:a8:68:04:b5:9c:2a:d3:b5:5d:88:f1:85:8c:0b:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BB:83:E4:62:9D:8D:34:11:86:7A:C3:D1:58:57:51:A3:29:9A:1B
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:53:3d:a2:55:55:f4:3f:31:78:b8:9f:55:cc:bb:c8:f8:
         a5:4c:42:5e:42:5f:12:bd:12:62:fe:f9:d6:84:d2:ab:8f:04:
         a2:6c:01:d8:50:bf:16:f7:9b:52:76:26:9c:8a:c6:8e:be:b1:
         98:6e:d6:ce:cb:65:26:06:1c:39:f5:24:40:81:13:34:ff:63:
         14:97:56:ca:f0:39:e3:1f:b9:27:0c:b0:09:b4:82:d5:d8:ba:
         26:9a:9f:7f:71:c6:af:dc:ca:93:ae:ef:01:f4:5d:0e:02:a0:
         66:9a:5f:f1:be:84:ca:c7:65:bd:ce:f4:00:73:3c:23:6d:fe:
         eb:89:81:43:a6:77:c0:a4:af:56:dc:db:a5:8f:c4:d5:a2:26:
         5f:f3:00:3e:c2:e1:1f:99:47:2f:64:e1:e9:21:8d:58:18:39:
         c5:a8:8f:c2:8b:8a:bf:de:3d:e7:65:15:db:44:bd:b4:64:36:
         4f:10:fb:e6:e2:25:4b:9c:61:48:80:f0:c3:c0:b7:93:8a:c2:
         5b:38:34:e6:1e:7c:c0:ae:52:4d:97:45:11:d4:5a:73:eb:55:
         01:41:f0:67:a4:26:63:5b:87:2d:04:2a:4b:d6:0a:57:58:dd:
         45:f4:b5:4c:6e:50:90:c9:22:9f:f6:cb:c9:aa:6e:85:8e:51:
         fa:b8:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----