Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          2DJ+p9s9/EqV9NcT0WFamFMMJwGpXOXGnGJH/9O8VwY=
Subject key identifier:   4D:0A:C3:C0:F8:0F:E5:8D:41:8D:30:CA:93:B3:31:C5:70:1A:98:C2
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01962F74471BBF7E333A212A595C2E975998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1524
Signing time:             Sun 13 Apr 2025 14:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:11 +0000
Files and hashes:         1: 6TknrlKhj_raOY5i61r4APdWgi8.roa (hash: Azh2w6lu1iMwNp36BaIHM3fgEc2SSAdGdIuaWOlC4bU=)
                          2: 6kgMCA_yg3nxvdWkonLmiL8us10.roa (hash: Rw/PVOBSR56XgIYCXH0ZrGAd8VZfvOELoAhjhJknHmg=)
                          3: 9Jn3Ao8kD2UL0UBy8f0i2zzE-8o.roa (hash: x5aIy8suItwCsXcwC1xvM9N3xbkHkVnj8Bi3Hjm0x2A=)
                          4: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: j3x4CbtshrgN/JMIzoNky2Njf3HaSBJbpysxEMnK/bY=)
                          5: HTGaeGMP8CdzPiu4Kdvv1i2tT0s.roa (hash: fsIzfA72TKkiu+lQEzJHOVfbq74I+G15Uri9KTlcXHM=)
                          6: L01JaFs6upvCxukuRpNJVKLONEM.roa (hash: RD22oITNNi+VkpKpvsFNn1oAsq5Be0nqy5KSTok7hqU=)
                          7: fRuZqnM9bu9aFuMAbNUnnejAy3E.roa (hash: 0Pw20JeeLvEf3W3rAxbHJOJ0+O4OMpDfQqbFAkyf380=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:47:1b:bf:7e:33:3a:21:2a:59:5c:2e:97:59:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Apr 13 14:01:11 2025 GMT
            Not After : Apr 14 14:01:11 2025 GMT
        Subject: CN=4d0ac3c0f80fe58d418d30ca93b331c5701a98c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:91:99:70:dc:db:fc:ac:d7:45:22:57:50:
                    b9:0b:29:82:d1:50:71:8e:1c:0a:62:08:68:73:3a:
                    b8:97:02:bf:63:c2:fb:8f:b7:8c:bb:a6:22:b4:a0:
                    5f:b8:f2:35:2f:50:37:3e:bc:c2:d9:f1:8c:4c:a2:
                    db:5d:fb:8f:06:7a:16:6d:95:c2:b2:61:1e:66:2b:
                    32:ea:d1:63:4e:31:ea:e2:11:d6:95:ae:7d:1d:73:
                    23:19:ce:67:d3:e8:51:1d:53:e8:73:ad:7b:b8:05:
                    06:99:d1:79:c9:b0:56:b1:82:45:33:58:a1:54:51:
                    d9:bb:ec:6e:35:18:37:fc:7f:8f:ad:d9:c6:38:b8:
                    f2:03:4f:35:b1:15:a0:bd:d8:5e:fd:79:07:14:8e:
                    bc:c3:cf:d7:0f:10:70:34:e9:8e:87:3a:31:fb:6c:
                    2c:dd:84:12:e8:fa:50:88:bb:6d:b8:47:e1:c6:5f:
                    8e:e7:b1:fd:30:38:08:4a:8e:53:af:4c:d0:0b:1d:
                    0b:13:2c:7b:cd:e0:e3:68:f6:c8:0f:6f:8b:c4:aa:
                    34:2d:61:1e:68:21:82:7b:bc:d2:3b:b3:6d:21:ad:
                    d8:43:27:af:06:0c:6b:01:3b:c7:cf:98:27:ef:26:
                    6f:9e:b0:36:fc:28:d7:2b:e5:55:ab:da:84:0f:6f:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:C3:C0:F8:0F:E5:8D:41:8D:30:CA:93:B3:31:C5:70:1A:98:C2
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:ff:87:b3:1e:20:78:81:7f:ce:33:f8:b6:09:95:f4:bc:
         d9:05:68:d5:c8:33:21:30:ad:47:ce:b6:22:28:ca:fa:99:9b:
         5d:bc:f8:30:49:1b:86:c6:90:2f:90:91:04:4d:74:e5:f7:89:
         63:b7:e9:31:25:4f:6e:46:f4:39:3c:32:6f:aa:58:3a:ea:d2:
         de:13:17:f7:fb:1e:31:07:c6:b4:6c:9b:29:06:75:4a:b2:b4:
         a9:cf:e4:ea:01:8e:53:ac:4e:fc:76:f4:39:35:b5:00:a6:e1:
         ed:26:c7:9c:2f:4e:ec:55:cf:0a:8b:90:33:2c:dd:40:94:d5:
         d1:58:61:ae:ab:18:ba:08:c9:4b:dd:af:3f:18:d6:bf:4e:db:
         d7:35:08:89:68:8a:15:5a:6a:f1:d7:22:27:38:64:6f:8e:91:
         f6:4c:0c:b5:49:c5:16:1d:1e:c5:2d:f4:81:e6:19:7b:aa:ae:
         fd:8f:68:77:be:24:b4:08:15:0d:19:16:45:e5:4a:6a:f7:09:
         b1:d2:63:68:cd:b4:5e:df:2d:85:7e:b4:99:a9:cb:b0:bc:95:
         7c:7d:1f:b2:16:49:b6:30:da:42:ed:a6:6a:bf:5d:c1:15:8a:
         73:22:21:e4:8f:5a:e6:f7:d3:9e:82:88:63:e1:7f:36:4d:57:
         24:da:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----