Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File:                     Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier:          NVPg7/8V5W/3E+b6loMqpSCwREgL2g0Le1hP7JHYbbc=
Subject key identifier:   6D:9B:C5:BF:5A:45:6C:55:74:EA:80:DE:1E:BD:EB:28:70:F1:F0:62
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer:       /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial:       01962E992244CACC2E172C669D5EC6D17019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number:          04A8
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
                          2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: J4JJaf5YSMYqaLbYbwDkmOOEA3I40jjc7KgnO5ZUUQ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:22:44:ca:cc:2e:17:2c:66:9d:5e:c6:d1:70:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=6d9bc5bf5a456c5574ea80de1ebdeb2870f1f062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:5b:3e:a2:fb:ea:fa:e1:11:1b:db:b2:38:
                    39:67:fe:44:71:28:1d:42:02:cb:18:32:d9:21:4b:
                    a1:48:69:ba:67:39:2d:73:84:16:f7:a0:fb:c3:f6:
                    91:57:c4:62:d0:f0:d2:42:61:93:27:97:58:bd:b2:
                    53:41:dd:04:91:ba:6c:22:b1:e9:3a:0d:d9:96:5f:
                    a2:b9:b3:e8:2b:b8:34:d1:58:73:c8:1a:95:8e:02:
                    3b:ed:fa:21:42:49:2e:74:09:90:aa:1c:99:73:66:
                    9e:84:55:f4:d2:29:21:d6:a9:ff:19:71:2d:02:5f:
                    76:e5:90:1d:87:e7:b9:9b:48:c9:67:62:dd:95:80:
                    d3:2a:1d:94:c8:43:c0:2d:84:df:02:64:06:73:36:
                    42:85:a4:61:a3:7c:07:29:c2:06:28:c9:0e:27:a1:
                    c7:01:1f:f1:83:0b:ac:11:12:0c:17:90:54:6a:ba:
                    11:c2:75:e0:3e:45:ee:f7:7e:f7:56:23:c5:b6:96:
                    c5:6f:51:6b:03:bf:7d:c8:0b:ca:82:a5:be:45:0b:
                    7e:e9:fd:99:48:69:a6:f9:7c:f7:72:26:2c:c7:e2:
                    0c:cc:cd:15:0c:8b:97:e1:30:34:d5:d6:d1:65:fe:
                    9e:fc:82:5e:3a:57:a3:8c:71:95:e1:c5:14:0a:56:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:C5:BF:5A:45:6C:55:74:EA:80:DE:1E:BD:EB:28:70:F1:F0:62
            X509v3 Authority Key Identifier:
                keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:09:aa:68:36:27:b3:a7:38:42:e2:a8:22:18:62:e6:60:97:
         2a:55:90:ff:c1:bd:c7:34:79:ec:bf:e0:85:e2:ba:2f:6b:7c:
         2e:8d:ff:e4:01:50:f8:fe:1e:4b:86:3c:44:5c:72:28:ad:9e:
         df:ef:dc:30:9f:11:c5:cb:4a:68:f3:e5:7d:f5:46:fd:b6:25:
         87:23:a2:26:2b:ef:1b:2a:84:79:00:d4:74:00:63:f6:1c:15:
         5b:6c:81:37:32:16:29:e6:21:3e:08:e6:3e:bf:20:71:25:1b:
         11:92:44:4f:21:07:9c:5c:c2:e1:de:50:25:94:6f:e9:f1:dd:
         7d:e3:6d:9b:ac:e1:9b:9c:ae:eb:06:63:30:2b:96:14:a6:98:
         b2:65:1c:b0:e0:04:53:14:06:71:a3:6a:dc:13:91:da:34:8b:
         c0:8b:be:77:12:37:0c:6a:bc:8c:9c:0f:49:0c:5b:70:26:29:
         7d:1d:10:ec:8e:b1:f0:20:0e:c0:be:cb:d0:a2:4e:fc:95:00:
         91:9d:43:d3:53:48:fb:00:49:2b:81:93:56:a0:c2:8a:90:56:
         22:15:c5:76:8f:c3:10:ea:4b:ff:8f:94:64:87:8c:d3:30:9b:
         2c:92:74:11:b6:ec:aa:6c:f5:eb:3b:f6:27:7f:d8:85:37:e4:
         ed:ba:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----