Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File:                     _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier:          I8mXMVKOkKKM5+dSifXZFdSiVNgFmpuClgblw2ue/Ec=
Subject key identifier:   E5:B2:50:DC:17:E7:E7:B4:63:DF:EB:F7:92:D7:F4:6F:B7:84:5C:DE
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer:       /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial:       01962FAB94E29B2C447D5097C474C9CA6808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number:          0546
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 23TVA-2OL8ERCOX_dzgjoyDr7ic.roa (hash: HMZHd+55+IMt+Dclhou8M1RYJTwGL8XVXHQpPA4hFCU=)
                          2: 4-TbcXFa8SESUNpbTLtHqKnqP4k.roa (hash: rfh4ZMQFADgVlOUe/tULyDtfhvBafCEIjiEbbsuqihs=)
                          3: NndyVqvy3vcxCnZsIK2_Uyxv0lk.roa (hash: cAwKtSP7N0kxacGJxtWaLz9RZYIS8hQUwg7TB0bpnnY=)
                          4: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 4Ua/Akgi7iON6sHeC9S48wJi9AKJWTo1Y/QrU/vY0JE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:94:e2:9b:2c:44:7d:50:97:c4:74:c9:ca:68:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=e5b250dc17e7e7b463dfebf792d7f46fb7845cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:1d:fa:56:e2:0e:7a:b9:1e:34:eb:ac:26:
                    2c:70:24:a6:eb:5a:f7:5c:bc:c0:6b:61:80:89:97:
                    6b:cc:af:93:4c:82:d9:c2:0b:b5:ee:c1:7d:df:cc:
                    04:e6:72:c4:11:cd:89:74:c2:fb:c0:8f:3c:6e:bd:
                    97:75:1f:8c:fa:a6:00:c0:b1:f9:32:03:0d:a9:f2:
                    14:a0:5e:90:d0:66:fd:5d:90:6a:0d:db:5d:3e:a7:
                    a4:61:92:30:39:ad:40:53:18:d1:5c:b9:6b:5d:b8:
                    a5:a2:0e:4b:c4:3c:95:33:a3:64:52:ba:5f:9b:53:
                    ee:53:70:2a:ee:1a:97:0c:62:78:c8:54:b0:a9:9c:
                    17:b1:74:50:0b:53:51:48:62:64:a5:bf:b2:72:00:
                    d1:5c:2c:7d:b4:0c:97:10:b9:ea:cb:81:12:b6:31:
                    55:b6:0b:54:db:49:06:cb:d2:1f:43:06:d6:dc:7d:
                    ab:2e:eb:2b:02:a5:ce:df:91:71:27:97:6a:0c:d2:
                    a8:6e:51:55:71:f0:0d:4d:d2:f6:33:f0:d4:e4:d8:
                    05:63:92:f1:b9:ea:2b:bc:0e:92:f8:ff:39:6b:7d:
                    e1:b2:35:cd:88:ed:fd:de:52:37:59:e9:7b:04:d5:
                    e2:5a:d6:ab:a8:9a:f5:aa:ef:86:9f:de:6a:c8:5e:
                    8f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:50:DC:17:E7:E7:B4:63:DF:EB:F7:92:D7:F4:6F:B7:84:5C:DE
            X509v3 Authority Key Identifier:
                keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:77:79:a4:40:f9:0e:26:20:99:c1:01:9e:0b:78:32:dc:66:
         8d:ee:bc:06:06:ab:64:87:fd:77:d4:54:02:6e:f9:86:c1:8b:
         5a:ca:27:51:d5:a5:81:f1:b5:a5:94:19:1e:c8:3e:7b:63:7a:
         49:9d:ff:a2:2c:f0:4f:ed:5e:3e:3f:a7:c3:95:12:5f:a2:5f:
         37:cd:f0:bd:b5:45:2f:bf:dd:56:41:0b:6d:2e:c9:31:5c:f8:
         71:7e:46:69:70:17:e1:63:cc:36:62:72:cc:86:c6:d2:89:63:
         2a:54:8f:cc:25:eb:63:34:51:a5:92:29:78:f6:c0:0d:44:7c:
         fa:e6:3f:63:5a:75:d4:f8:48:60:57:23:56:57:88:48:b9:5a:
         01:e0:f0:c5:4e:fb:4c:cf:ff:7e:17:3d:28:05:13:5f:dc:14:
         7d:7f:c1:62:45:23:c5:7e:58:b6:f1:cc:05:3f:5f:a5:9d:c8:
         70:19:e5:38:34:07:5b:d2:5b:51:24:c3:3c:45:04:45:aa:1c:
         0d:19:9d:20:bd:69:bc:cd:00:5e:bf:1e:48:ff:4e:85:3a:e1:
         6c:00:05:db:c9:c9:41:c1:81:d3:08:b5:9d:0a:6e:dc:69:d5:
         4d:e9:1f:b3:c8:50:a0:fb:56:80:c7:50:f0:c0:17:a9:cc:5b:
         3b:27:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----