Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
File:                     X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json)
Hash identifier:          FOsf5yguzjfkH35Gj95ZFMshL8Hs2Rfh8u3vICkoits=
Subject key identifier:   00:EA:7B:5A:A0:C9:A3:D7:A1:AB:9E:93:9F:C6:8D:12:86:66:F7:81
Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93
Certificate issuer:       /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
Certificate serial:       01962E9904FBE627173485E0649DECB747BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: ZY7ZowEWGaq11oCoM1Bb6WrbmQQMxphqRRqXSPZ3sSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:fb:e6:27:17:34:85:e0:64:9d:ec:b7:47:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=00ea7b5aa0c9a3d7a1ab9e939fc68d128666f781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:8e:87:d4:98:fd:66:d3:76:0e:84:1a:cd:
                    87:22:36:cd:70:17:ad:93:56:95:f7:b6:3c:c7:98:
                    cb:6d:98:61:4c:56:d1:67:c4:d1:8e:5e:ae:e0:ac:
                    c8:f8:31:71:fe:14:9a:86:c3:f2:b4:a3:f7:d5:71:
                    f2:09:fc:62:1e:33:12:5a:0b:2e:49:6b:76:e6:29:
                    5e:06:5b:29:7d:73:43:e9:68:62:2f:30:8a:95:53:
                    01:ae:42:b4:72:6e:88:ff:29:93:46:02:17:6a:57:
                    fe:f3:3c:2e:6e:56:8e:18:81:13:c8:df:12:26:cd:
                    93:42:54:12:9f:19:5c:08:61:2c:e8:88:b3:3b:3c:
                    26:c2:02:7c:b6:fd:e9:71:c2:53:a8:91:dd:12:8d:
                    5b:f9:f2:a6:a7:c4:fa:ba:63:ff:bb:2e:d5:65:66:
                    cd:83:3c:3f:3c:a3:97:b1:61:4d:f8:12:b2:b0:26:
                    19:fa:63:a4:0c:2c:a8:8e:66:5e:a1:6b:0a:c5:ab:
                    f5:da:67:20:f5:2e:7e:5a:b1:34:2a:28:6d:5b:64:
                    73:ea:8e:d7:04:f5:69:39:31:db:69:63:b2:e1:5f:
                    5a:d1:cd:74:f2:70:3e:3c:a1:3d:86:8b:1a:1e:5b:
                    fa:be:be:80:90:16:23:8f:8f:8e:83:89:eb:00:1c:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EA:7B:5A:A0:C9:A3:D7:A1:AB:9E:93:9F:C6:8D:12:86:66:F7:81
            X509v3 Authority Key Identifier:
                keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:59:c0:bf:74:5c:62:0b:4d:a2:15:eb:19:c7:7a:e9:b1:
         24:59:b0:6d:85:df:5f:76:0e:f1:2d:cd:53:ef:fc:23:ba:53:
         6c:f3:c9:b2:69:96:8d:5d:68:87:c0:40:f7:a9:5e:d9:d5:20:
         b6:44:bb:3f:8d:28:01:3a:63:84:a3:74:f8:54:ce:35:79:a8:
         95:83:07:09:5f:f7:02:53:1c:28:ec:26:f6:74:80:68:fa:88:
         39:6c:1a:3f:d9:ce:c3:3c:bc:47:ce:a1:8d:fc:b0:1e:52:f3:
         60:47:6e:33:c4:1f:ff:df:d3:5e:95:e3:c2:dc:57:0c:10:08:
         bf:eb:63:9e:29:80:4f:c8:f8:5c:94:eb:15:1c:64:aa:b5:97:
         23:7f:3c:5e:49:7f:76:07:eb:92:91:df:91:64:ff:6b:74:ea:
         30:ca:bb:c1:b7:69:ab:d6:1d:fc:da:3f:77:1d:6e:40:d9:f5:
         98:bd:00:86:e9:3f:6d:12:fb:5f:5e:9b:e0:e2:1c:bd:26:f4:
         ae:fd:82:26:dc:c0:8c:dc:ce:34:15:bc:44:7e:97:48:d2:96:
         3c:54:d4:2b:e5:0e:33:8a:9b:bb:2b:a2:2a:c7:88:52:0f:d3:
         c4:28:18:f4:f0:48:76:3f:ad:1e:c2:a6:5e:72:c2:0c:4e:a3:
         46:68:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----