Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          gvUic4j2pZ14pz37nEIIu4Q1XcEAoTCmZPNbiDeVbf8=
Subject key identifier:   E2:16:B8:BB:50:F8:0C:3D:E9:8F:06:58:14:59:6A:39:AF:48:34:03
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01962E2ADF79B5D30C01750C044DFFB50B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1559
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
                          2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
                          3: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
                          4: Q8d8hFO1Z5QGt0sy9UqRFXk4mTo.roa (hash: wlFaCzv/BxgMEgp0yQqyJXxYnRAML7mlxN04EDVXED8=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: 0njKZsGoOAR009o4MnKTewX+7PQBDZ3N5bE9YXkufkk=)
                          6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:79:b5:d3:0c:01:75:0c:04:4d:ff:b5:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=e216b8bb50f80c3de98f065814596a39af483403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:52:07:3d:8e:df:ee:75:77:56:7b:f3:0c:7b:
                    15:b7:2f:76:0d:1f:3c:f3:b4:e8:a5:8f:5a:18:bb:
                    ff:6e:5b:8e:fb:ad:af:56:80:d5:46:6e:fe:06:c6:
                    bb:1d:f8:88:47:4f:db:20:ef:4e:59:6c:87:ec:91:
                    1f:33:54:9f:bd:41:0b:75:9a:e5:81:9e:0a:01:a3:
                    95:a2:14:5f:c0:c6:35:0f:ab:a7:5d:38:51:9b:de:
                    ec:34:e9:16:7a:92:b5:f6:bb:df:b4:9e:92:c8:8f:
                    b0:15:2f:e1:7b:6b:48:f1:9b:b7:e4:a1:64:14:f4:
                    66:40:7c:cd:28:f5:29:d0:25:af:23:93:67:24:10:
                    e2:21:e2:b9:41:f9:d9:1c:45:98:68:b1:4e:1b:8d:
                    4d:76:97:0d:5d:1a:03:a8:f7:e7:5c:a0:76:a8:9a:
                    f0:f2:cb:89:cf:74:c9:4e:0a:a2:e0:e0:64:be:eb:
                    5d:8a:ee:ce:83:84:35:b4:68:22:aa:44:01:13:d8:
                    29:17:04:89:f7:98:42:1c:1c:f3:52:b2:9e:24:87:
                    35:78:ee:66:44:13:be:da:01:bc:61:b7:d6:97:21:
                    6d:6e:f5:12:de:43:04:00:d4:7d:4a:15:b0:df:81:
                    d0:54:a1:6b:af:d5:54:ef:13:6c:70:f8:24:dd:8d:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:B8:BB:50:F8:0C:3D:E9:8F:06:58:14:59:6A:39:AF:48:34:03
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:59:f6:0f:c2:54:fa:79:b6:2e:3d:7c:18:b5:7a:f7:0f:e7:
         79:ab:98:ad:e6:20:5c:2d:ca:70:f2:64:aa:c2:fa:f3:c1:5f:
         88:36:b1:ba:6f:c2:43:70:20:48:bc:3f:62:f5:d3:7b:f6:e2:
         2c:ed:90:35:b8:15:81:75:1a:92:4d:48:5e:ed:37:92:e5:83:
         ed:77:b0:26:b1:f9:4e:7a:cb:4b:51:b9:9c:4e:1d:c3:1f:e2:
         12:61:61:7a:4e:fb:50:44:03:11:c8:e1:fa:6b:60:a1:33:01:
         53:4a:f0:4c:32:a1:55:92:95:95:b8:ce:70:0a:f2:d2:4f:52:
         10:d0:d2:10:58:fc:a2:81:a2:41:a9:a4:0a:4a:fb:82:6c:48:
         48:9c:93:6d:00:d6:ea:7f:bf:41:b4:7f:82:3c:c0:92:6e:37:
         ac:8b:27:19:66:e4:6a:4a:37:db:90:08:80:4d:45:30:34:5a:
         ae:12:05:d8:18:2b:ba:24:99:a6:10:d1:fe:eb:e1:cb:1d:28:
         db:6a:3f:38:5c:2a:95:14:fe:25:10:48:37:3d:05:00:1c:7e:
         c7:6c:5f:eb:6b:43:af:ae:3d:c9:f0:30:ee:e7:37:f9:59:12:
         2d:e5:8e:ae:d0:cc:39:56:e0:4d:81:1d:48:0b:f4:77:d1:44:
         ce:72:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----