Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File:                     X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier:          Nr6WHziUC0hd4QLJ4eETPsfUgqY7hMHwP3xtXaLBvUw=
Subject key identifier:   61:C1:5B:40:43:53:84:7E:3F:0F:1C:A7:59:98:3D:AF:20:D1:7A:CC
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer:       /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial:       01962DF39EC5ACE8CC2FF38F6519286476E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
                          2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 6cBhlRZ1EHiWS1mrbfKpLAk7g685KHrZ4s6m09mKbuk=)
                          3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:c5:ac:e8:cc:2f:f3:8f:65:19:28:64:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=61c15b404353847e3f0f1ca759983daf20d17acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:3a:d2:3f:4c:20:f4:e0:47:c0:b1:c0:e9:
                    29:40:87:78:2a:87:9e:e9:73:23:75:f2:b9:50:f9:
                    d6:16:a2:12:df:4b:35:94:75:6b:68:29:88:00:7e:
                    17:86:3a:51:7b:00:a5:2e:ea:ba:16:8c:1d:f5:01:
                    28:35:af:c5:78:10:81:fa:00:b6:51:bb:4a:e5:f5:
                    15:37:9f:cb:49:ff:4a:c7:3c:89:d7:49:15:4c:20:
                    93:73:63:c3:67:6a:af:86:ec:52:88:d0:5d:c2:c5:
                    b5:ac:76:30:cd:66:ce:da:55:98:e7:40:a3:09:bd:
                    ef:b5:1f:73:ee:9b:bf:4b:d9:3f:cd:2a:29:a8:33:
                    52:0a:85:51:d3:82:cd:20:31:0d:3f:f2:77:17:df:
                    a2:37:b3:45:79:49:42:3e:6d:03:1d:01:11:93:8b:
                    f8:39:0a:4a:87:8c:79:b4:16:b7:1f:f6:de:3a:b6:
                    fd:0d:80:0f:c5:f2:ae:8b:47:5e:a4:ff:63:e8:f8:
                    58:b9:33:e9:bf:56:03:d8:7a:1d:da:d3:a4:b9:a8:
                    cf:49:90:a1:b9:88:0b:1b:bc:04:21:dd:be:61:45:
                    6a:63:41:e3:b8:3d:c5:45:fd:4c:d9:bc:63:2f:77:
                    b2:85:62:da:af:2b:57:22:b0:6a:69:a7:c9:9e:81:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C1:5B:40:43:53:84:7E:3F:0F:1C:A7:59:98:3D:AF:20:D1:7A:CC
            X509v3 Authority Key Identifier:
                keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:e6:42:f0:4d:26:16:24:8d:27:c9:85:48:e6:92:86:5f:
         c8:b8:36:24:4e:51:3a:1e:0b:e4:5d:72:4a:f8:d3:31:ca:2f:
         44:95:3c:87:3a:c4:4e:71:fc:0a:a9:03:e2:f1:5a:6a:a4:33:
         26:f5:fd:2d:17:2d:e7:1b:7b:b6:7c:0f:e2:17:89:54:47:a7:
         02:38:de:c7:9a:ee:3b:ef:d6:44:ba:e2:b9:ad:cf:48:17:85:
         99:f6:c3:9f:00:20:f2:f5:68:dd:7c:c3:c0:3c:aa:91:cf:21:
         3c:f7:7d:c1:74:b3:d2:27:ba:4e:ec:c0:d9:06:04:13:a7:fd:
         95:74:2c:8a:8a:95:09:6c:3a:40:70:29:e1:a6:86:a6:46:77:
         e3:2e:bd:55:52:ba:27:f4:e8:7b:60:3d:83:8e:12:f8:4e:40:
         68:74:f5:fb:98:fa:d0:14:f8:05:98:7c:65:60:34:2d:a8:f1:
         5b:35:fa:8f:67:c8:46:8c:c9:4f:9c:ed:9b:06:c9:97:a7:06:
         91:29:1e:fe:01:80:46:40:4e:66:91:34:93:f1:44:ac:38:43:
         67:9b:41:e4:2f:e4:a5:93:93:96:9f:b9:7b:a1:b9:10:1d:ed:
         58:65:8b:9b:c9:f7:cf:77:da:9b:71:83:4b:5b:9d:0d:16:4f:
         2e:15:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----