Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File:                     5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier:          tWHJRfVrc9AJt0EoXPvW/xCH03ZDTuvXnUNoUVsLWNw=
Subject key identifier:   8D:40:02:03:4D:F1:15:4E:8E:0D:C7:90:F8:C5:CD:FD:10:03:83:E7
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer:       /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial:       01962E61D4269F8E9838C76A251EEB0B9836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: wutSKpz7X+dYSnX3x0jQblf0+eRTZPxKbpfqRX+wp40=)
                          2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
                          3: HMayfNdgxzPgTIksbOz-A7oqLCk.roa (hash: 3k2Q130datVFrgfiHucYcHqZP3tKnpk1Z1BK3tttEV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:26:9f:8e:98:38:c7:6a:25:1e:eb:0b:98:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=8d4002034df1154e8e0dc790f8c5cdfd100383e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:1d:86:5c:6d:8c:ca:c4:7a:a7:61:7e:9c:
                    1a:6d:d1:23:df:9d:30:50:c7:27:be:a9:df:60:73:
                    f8:e3:e3:74:2c:f8:13:d6:77:2d:32:b3:24:f7:ea:
                    a7:8e:ec:63:cd:b9:c5:7b:e9:d3:f0:58:c6:c8:18:
                    6d:0c:37:bc:29:f3:a5:86:78:06:5c:61:4c:c8:0d:
                    a4:5d:ca:5a:d7:3f:c0:d9:e6:2b:03:52:e2:c6:4f:
                    f6:de:e2:87:7a:c3:ba:a9:74:df:f0:7d:07:8b:4e:
                    aa:60:df:ef:b0:68:46:d2:87:4b:1d:d6:19:ed:bd:
                    10:66:f3:da:7a:25:a4:83:5d:a8:70:b1:42:f9:30:
                    41:37:8a:fa:7a:92:19:b7:ca:b5:81:32:89:f8:9e:
                    e9:4d:e8:0b:b8:35:97:29:64:f6:30:c5:eb:bb:c0:
                    6d:2d:57:c4:08:a6:8a:59:f4:31:52:be:69:95:50:
                    69:ce:d2:ef:85:1a:97:01:7c:45:3c:3f:84:c7:c0:
                    37:a4:6b:cd:ef:59:9b:81:bd:df:09:b9:da:2e:75:
                    70:f0:82:99:84:f9:8c:a5:6b:03:3c:ff:a1:ff:d5:
                    38:43:be:78:7e:3c:84:5f:c3:be:55:c7:84:8b:69:
                    55:8d:5d:4a:ef:82:18:f0:7f:35:a8:a9:e6:e9:8c:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:40:02:03:4D:F1:15:4E:8E:0D:C7:90:F8:C5:CD:FD:10:03:83:E7
            X509v3 Authority Key Identifier:
                keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:c0:19:ac:6f:dc:56:55:24:17:ad:a3:7b:b5:5c:ee:fe:
         50:bb:4f:1b:d0:1f:fa:04:2b:77:32:67:8e:6f:48:f8:e9:af:
         7d:2b:ca:97:ac:47:6e:1e:d6:d6:f6:e0:c7:97:c5:ab:d2:1f:
         e4:4a:a4:37:94:5e:e8:07:12:c5:df:27:04:e5:36:a4:f9:27:
         cd:1d:29:61:13:6a:13:e4:c6:3c:2f:2b:e7:04:ef:a7:1e:de:
         ea:aa:b7:f5:e6:ca:fe:95:d0:88:80:16:74:fb:55:96:a0:98:
         16:d7:9b:47:38:a1:de:6f:b0:b3:17:b3:ab:ad:70:a5:9e:b1:
         8e:c2:3d:a5:a0:0f:62:12:27:97:53:89:65:71:79:07:a4:9b:
         cf:8f:16:ca:dd:1e:ab:fa:48:cd:ed:df:78:ef:c1:51:67:39:
         63:04:ba:e1:f1:98:29:88:ad:34:12:6b:43:cf:35:a3:2c:3a:
         55:40:c7:eb:f9:fe:31:d2:04:e5:3c:d9:22:76:1b:9e:52:fe:
         2b:98:25:d4:69:e3:ef:f9:5d:e6:5c:6f:06:95:94:27:1d:c6:
         ed:0d:9a:c2:bc:ce:c5:03:e0:37:8b:73:3a:1f:3a:53:c8:b3:
         d1:de:ca:56:33:88:52:02:57:4d:86:6b:b0:c3:05:95:7b:ff:
         60:ff:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----