Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File:                     I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier:          Q5t1PIpwthJkBKGJ+HMERJc2o0B7rfpcwUHgo5YFOE4=
Subject key identifier:   45:7D:E9:D5:88:68:64:4B:3D:0F:F2:BE:CE:EE:59:1A:2D:A2:F3:D2
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer:       /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial:       01962E989FEFF12993852F4D44B3E1F27A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: 7Sg9vxSHlSU/sHtCu4N66QN9c0x4sE47OJlzaz94jtk=)
                          2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
                          3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9f:ef:f1:29:93:85:2f:4d:44:b3:e1:f2:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239c45e43625522080aec53952989a13a28abd00
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=457de9d58868644b3d0ff2beceee591a2da2f3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:6f:86:ec:de:e1:e8:64:47:5c:4d:d7:6d:
                    03:de:7c:da:c4:43:ee:30:2e:74:2b:e1:ad:4e:d0:
                    9a:bf:b6:76:0c:99:52:ac:30:26:b8:6b:5d:23:ee:
                    d4:45:91:31:40:37:00:00:9e:a7:f5:4b:f6:16:d8:
                    e4:15:24:2c:bf:a1:44:7d:bb:74:39:f1:62:f6:c5:
                    28:4b:72:06:37:f6:69:ad:bb:2a:eb:09:f9:cf:24:
                    19:7c:9d:cd:0c:c9:df:f7:61:c1:11:d9:a1:e9:38:
                    64:60:ac:4d:79:eb:22:e8:ea:c6:63:01:1b:75:97:
                    e8:94:5c:ea:f0:18:f8:9e:3b:28:a7:21:2b:99:0d:
                    a1:2a:96:d1:27:c5:e9:7d:62:d4:c7:89:3a:2d:30:
                    cb:a8:f2:15:0f:25:c6:13:dc:4b:3b:1b:77:1f:9f:
                    c0:c9:99:e8:c7:f5:74:72:a9:72:66:93:b3:2d:10:
                    15:bb:00:07:b3:5f:b1:b4:c6:cb:e6:93:2e:cd:5b:
                    b3:f0:13:53:5c:a0:69:cf:be:0d:8f:82:51:6e:5a:
                    eb:22:6e:b0:1e:bf:f5:b9:d2:a6:1c:28:d9:38:7e:
                    8e:f2:ec:49:d9:e4:75:27:2d:2b:5f:68:8e:a1:a1:
                    5a:dd:23:ca:b0:18:52:c9:7f:e7:4c:a4:4f:62:05:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:E9:D5:88:68:64:4B:3D:0F:F2:BE:CE:EE:59:1A:2D:A2:F3:D2
            X509v3 Authority Key Identifier:
                keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0f:0b:f4:40:3e:cf:a8:1a:13:d7:0d:31:e9:74:63:ef:62:
         3e:a9:b3:9e:90:36:07:5e:bb:0f:2d:17:3a:07:91:00:fe:7c:
         05:3f:6e:33:c6:8a:a5:7b:16:07:26:cd:26:b0:aa:e8:b3:b4:
         11:cb:65:7a:fd:65:eb:c1:56:1d:04:82:64:69:62:92:f3:fc:
         d3:4e:6b:29:31:e0:a1:2a:20:cb:ca:04:6f:4b:ce:1a:4a:c1:
         8c:6f:a8:37:99:c4:35:b4:77:c3:6e:db:ec:a8:43:fd:01:0e:
         90:44:f5:bb:7a:e8:90:fa:80:7f:53:36:b6:77:04:1d:95:20:
         50:8c:66:66:40:23:2a:c1:54:ba:a5:c5:c8:fb:75:1a:34:ff:
         7b:38:d4:44:6f:8a:6d:74:9e:6c:9f:35:e2:0b:c6:96:24:7b:
         75:a2:84:40:ae:48:2e:c7:0d:53:ab:94:5c:43:07:78:d5:2f:
         47:2d:d3:82:a8:48:15:bf:0b:1c:36:65:8e:aa:67:89:3f:62:
         0d:6e:2d:ad:e2:66:f8:c3:cf:5f:b8:a3:35:92:20:d5:04:42:
         0a:8e:0e:b2:32:3f:8e:a8:9b:3c:1d:34:59:bd:e9:81:11:49:
         73:b6:44:12:30:c7:94:28:23:d1:87:7d:e1:aa:fa:44:4b:2a:
         78:35:8f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----