Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File:                     xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier:          NOt+Q4hBIFtKJg1I92Ltd/1IKFximjgkgYMKJHiGd0U=
Subject key identifier:   0D:E3:93:EF:5D:F0:9F:34:F5:72:41:39:0A:1D:A4:26:6B:26:06:B1
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer:       /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial:       01962E9900B5816E2C2C54C3ED292FADE9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
                          2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: trsuELSeseNgzJpdgiwBEbIVosp2fP7LV9a5UHUaNV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:00:b5:81:6e:2c:2c:54:c3:ed:29:2f:ad:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=0de393ef5df09f34f57241390a1da4266b2606b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:7b:0d:40:a6:9d:bb:47:ca:ea:ee:36:cd:
                    23:71:20:57:10:40:b6:7e:59:b0:7a:ae:bf:a4:6f:
                    c1:aa:8c:be:29:e8:4e:1b:f1:37:97:f5:f7:8a:62:
                    9d:17:47:b8:f0:58:d9:28:0a:45:3b:cb:37:df:64:
                    98:d7:fc:84:06:70:6d:a2:ea:ff:c7:ee:a2:e2:07:
                    f0:76:4b:74:ea:1e:d3:dc:b0:ac:4d:62:4c:dc:74:
                    8b:51:f0:66:bb:d1:15:b0:65:80:6e:fc:ab:10:df:
                    37:ad:d4:33:44:c2:0a:19:52:f0:38:f5:2c:b5:e8:
                    cc:0c:3d:94:2e:b3:c1:d2:89:11:77:84:48:ec:9b:
                    ca:5a:be:0c:5b:20:ef:e2:de:40:60:6a:f6:9e:63:
                    6e:2a:0f:54:be:f1:d9:1f:bd:2d:fc:c0:3f:24:d4:
                    e0:d1:f9:c5:bd:0e:96:c2:a4:b3:c3:0a:55:5d:ca:
                    d6:9b:3a:99:75:62:da:93:4a:a6:10:2b:e2:33:b3:
                    3e:f2:84:33:22:46:14:4a:ad:e2:e3:25:81:1e:6d:
                    3a:83:40:e4:a2:36:5b:61:0a:ba:76:e4:b3:b7:9e:
                    d1:bb:f3:6c:04:c6:fa:69:97:ba:4b:22:08:d4:d2:
                    71:be:76:b2:2c:4f:6d:db:5c:72:e7:98:31:b8:53:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E3:93:EF:5D:F0:9F:34:F5:72:41:39:0A:1D:A4:26:6B:26:06:B1
            X509v3 Authority Key Identifier:
                keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b2:50:2b:45:b2:f5:20:66:ba:db:e3:5e:03:08:f0:be:aa:
         72:83:34:dd:2b:60:3e:b5:02:82:9c:a3:69:42:8f:77:7a:3b:
         08:00:c9:84:c3:80:9d:02:7f:1e:fb:98:41:90:7d:ae:13:08:
         77:bd:23:6e:c2:4c:c2:da:e1:07:e0:63:ba:d2:b4:d1:8b:62:
         15:a7:76:00:b8:e5:5b:e5:c5:fb:b6:12:ac:67:d7:b7:c3:73:
         c4:81:3d:e5:29:e8:db:93:d6:73:f2:cd:4e:d5:d3:73:be:e7:
         41:60:0c:6a:75:38:7d:de:69:7e:f1:ae:fa:29:36:25:bd:ba:
         8a:f4:0e:fc:d6:e7:80:ae:9d:9f:dd:4d:48:bf:9a:a4:b9:13:
         f9:fc:25:9b:38:ce:a0:fc:f5:94:c8:ca:9a:69:ae:5f:c2:ca:
         0e:a2:b4:76:49:c5:f6:98:a1:16:d5:05:bb:9c:84:a0:70:c9:
         ed:b0:3b:78:67:b1:14:64:94:bd:00:09:25:37:e6:a6:c6:99:
         c0:96:e1:84:f6:cd:dc:e9:d7:ee:5b:6e:68:0b:e7:a7:45:9f:
         ab:22:4b:d0:6a:e8:f0:90:a8:38:7d:ba:9a:de:f2:8f:b5:61:
         73:d6:26:88:c9:78:e3:04:43:80:0e:f6:fb:50:8b:5c:4f:1a:
         68:5f:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----