Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File:                     1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier:          H8X4ERoLcJarcc3BYhzR0IgQROQ43r7mX9WWyrskF3Q=
Subject key identifier:   54:73:00:EC:9B:4A:73:BF:4E:54:99:E8:B5:8F:BF:F2:3B:90:F7:7D
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer:       /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial:       01962E6184D193203B75CEA8225E907E2940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number:          072F
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: JYoMzdIUcveHA0GkWasxOb4cdjbySjIIG+iC01fNwZ4=)
                          2: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
                          3: IosBMyCwhJpK9xWG1hvvXMqJa78.roa (hash: IYmZiNnkFwPxUpuPBI4TiPPkO8hQgA4aXIJpQwDNzpw=)
                          4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
                          5: WJoZ3Cyd9hGNWW7azIwgdgzOVS4.roa (hash: 4VZTAKZBwZm9hthBlF7ANdxLjE6ybka+xW9+Dectll0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:d1:93:20:3b:75:ce:a8:22:5e:90:7e:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=547300ec9b4a73bf4e5499e8b58fbff23b90f77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:76:a1:92:91:69:59:72:40:95:8d:ca:d6:
                    62:cb:9f:eb:56:e8:58:13:58:01:da:1b:08:39:b8:
                    8f:2c:48:e8:c5:2d:da:30:81:33:d0:5e:96:3a:fb:
                    0b:18:f8:aa:83:0a:ec:da:f9:10:37:fe:cf:9d:eb:
                    ef:48:2f:20:98:fe:51:50:ae:63:cf:5f:54:a9:27:
                    9f:74:bc:ae:56:2d:e1:74:d8:81:ec:0f:79:cb:0c:
                    03:97:90:20:ca:33:0f:65:23:60:33:6d:ef:45:34:
                    2f:fe:2f:c3:4c:45:27:6e:42:8a:91:ab:d5:84:87:
                    16:e3:0f:bd:f2:76:17:8c:7f:fb:4c:8f:27:9d:a6:
                    4e:71:f7:92:06:6f:8c:fb:a2:25:29:56:ed:90:76:
                    e8:cc:4c:b6:71:65:8f:a1:b5:83:47:7d:98:42:5c:
                    aa:b5:fb:05:4b:5e:89:f0:d9:fa:60:c1:4f:9b:05:
                    73:27:78:12:48:eb:3f:57:b2:fe:8f:b6:35:74:d6:
                    81:e3:60:f7:ae:6c:df:d1:23:74:75:a7:11:48:de:
                    20:7c:70:f4:fb:82:08:17:d0:7a:d1:3c:b9:8e:af:
                    a2:62:aa:c7:a2:61:a2:85:85:77:1e:b8:a2:7e:a3:
                    fb:3d:b8:8b:f9:03:48:a1:fa:60:da:db:89:a4:0e:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:73:00:EC:9B:4A:73:BF:4E:54:99:E8:B5:8F:BF:F2:3B:90:F7:7D
            X509v3 Authority Key Identifier:
                keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:dd:ed:7f:a4:9a:d2:4f:24:22:36:91:25:86:1e:f9:1f:
         67:99:ba:c5:d2:ed:69:ef:c0:42:ad:c8:e6:dc:3e:e5:91:ac:
         9d:28:28:31:8b:a2:03:92:42:2c:51:bd:f4:90:2d:5a:97:9b:
         bd:e3:50:18:6d:39:af:14:e9:64:b8:4b:6a:1d:41:0c:4f:d6:
         2a:26:5a:c7:89:4a:d3:60:a0:a0:1e:fa:fb:fc:18:3e:28:ec:
         70:36:5a:80:77:4a:88:c4:53:a0:e0:0d:0b:e7:fa:5c:39:e3:
         39:dc:88:5a:96:1e:25:23:00:83:03:f7:e1:dc:de:44:93:36:
         8e:7c:31:23:e6:01:8e:60:e2:15:2f:53:0a:98:79:d0:b5:fb:
         b9:b8:b2:8b:74:80:87:09:86:19:1b:53:02:c1:21:46:cd:cd:
         f5:4b:3b:b9:fe:7c:45:db:3b:80:a0:64:06:e7:58:09:e9:6a:
         57:04:5e:cc:34:05:de:b1:a9:5f:af:83:57:36:df:f4:25:51:
         f9:fe:30:10:a5:6c:ad:8c:72:3b:43:7a:ec:f3:fa:58:25:bf:
         1b:db:43:3c:db:47:4e:81:31:20:05:e1:14:21:54:c2:a2:de:
         60:c9:f3:16:df:82:0c:f8:20:29:ab:4e:8f:44:d9:f7:f6:1e:
         77:b9:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----