Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          ZooEowuKx9ctPfQQSOImZF/V1ne18KMAcfOuSCML4K0=
Subject key identifier:   FE:FF:42:3F:D1:C0:CE:AE:C1:4D:F1:AA:DE:2C:FE:8C:F0:6F:25:02
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       01962ECF620A473923804FBFEC94E635C285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          11FC
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
                          2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
                          3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
                          4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
                          5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
                          6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: EW7QvenDKMUnQ2ctau+Ub0sJKFWCKqcV8XebGjCrerg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:0a:47:39:23:80:4f:bf:ec:94:e6:35:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=feff423fd1c0ceaec14df1aade2cfe8cf06f2502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:a7:c3:92:2e:f0:96:d0:04:e3:df:9b:ab:
                    00:ba:3b:0c:6d:58:a5:25:1d:6e:7b:b1:5b:96:50:
                    86:f1:22:9f:e3:90:ea:7b:20:a4:cd:2c:bb:d5:8e:
                    92:c2:0c:b9:36:a3:fb:08:16:e3:d5:60:c3:ab:1f:
                    44:f3:59:41:23:e6:3e:5c:9b:2c:db:38:5d:57:4d:
                    ef:ea:30:ed:c7:86:7e:75:bb:23:e5:43:7b:1e:ee:
                    38:03:b5:10:f5:dd:50:b4:2f:d2:5a:67:50:2d:65:
                    87:24:9d:42:60:7d:a7:1b:4f:f0:bf:95:af:a9:78:
                    d3:24:57:5a:b8:ee:c7:6c:25:39:c9:3d:06:f5:9d:
                    ad:31:ea:0d:a2:37:e3:b1:a4:ad:31:32:90:08:54:
                    e6:9b:99:d8:0b:35:48:a9:dd:23:5c:c9:ab:02:b3:
                    38:3c:54:f3:29:5a:0c:aa:ce:ca:d3:48:b0:fe:16:
                    33:1e:4f:3b:d4:c8:53:53:18:75:2c:8c:e7:f6:c0:
                    f1:bf:69:ea:a7:25:5e:df:44:da:08:0e:44:e9:47:
                    98:d2:e5:1e:da:f4:24:85:02:7f:00:cc:93:2e:f1:
                    38:6d:f8:83:87:f6:c6:4d:cb:75:41:c9:9b:a1:db:
                    d5:3a:49:f1:c3:a9:9f:92:38:79:a3:bd:df:b9:d2:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:42:3F:D1:C0:CE:AE:C1:4D:F1:AA:DE:2C:FE:8C:F0:6F:25:02
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:b5:5d:a2:32:88:38:41:cb:5a:c4:ba:1c:23:a7:33:92:
         d9:5f:84:a1:0e:cb:a8:0d:a0:20:9e:4f:6d:35:03:8b:59:16:
         09:ee:af:93:e5:50:42:59:b4:80:92:93:9a:40:f6:b4:57:ef:
         30:de:26:10:41:ff:0e:60:c5:83:77:67:c5:97:99:9d:04:78:
         ee:a2:ed:ab:4f:2f:69:3e:06:f0:b0:f7:0c:0e:34:eb:e6:67:
         20:bd:6d:5f:b9:db:08:89:b8:a2:0c:81:4d:d5:15:36:01:e8:
         b2:12:bb:36:c8:9a:a9:8d:ce:6b:a4:22:4b:f1:0c:2f:3b:cc:
         82:b0:7c:3a:93:cf:62:72:57:4a:8c:1c:ec:5d:86:a7:eb:88:
         ca:b5:92:a2:c7:65:d5:0d:6a:7a:f4:06:b5:f1:6d:82:d6:71:
         7d:89:43:f6:9e:12:f2:3a:e2:c8:0b:31:b5:4d:ca:2e:12:22:
         ef:68:0c:3e:ff:d4:0e:c7:e1:ad:0e:c2:df:1a:dd:ec:2c:91:
         5a:71:31:84:fa:0f:39:63:0e:98:2d:80:b4:c1:00:7e:77:ff:
         d6:10:09:7f:42:89:4f:a8:ac:6c:1f:8d:04:d2:3f:32:e0:6f:
         06:c2:aa:23:8d:ce:d0:d5:be:e7:68:5f:06:d9:db:6c:3c:d6:
         33:ee:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----