Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File:                     U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier:          /sW55U06LeUDc4xUCOwdaq1qDdUU/z70sadc8XkG9U8=
Subject key identifier:   1D:97:AC:E4:97:49:80:C4:69:69:88:8D:DB:5D:9A:76:8F:6C:13:CE
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer:       /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial:       01962FAB3C13CB9553D90550EA31F00E7C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number:          0ADA
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: FxGYM_hv02AaXIYDo9H_3KmDiOE.roa (hash: ilnjKiRicNaYKGwZAGueokd7ASW/oQ+K5C8wA/h2Pvw=)
                          2: QAlZxJpPNS1rmQL4HuNAcE7lmik.roa (hash: S0+MsekOjpK1fn9TgliC/Ks4ugN2LoEukjLPMsOlGQY=)
                          3: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: 57CEXVNNLF2ijRipRuLG+hvZNBk9drtDF2HdhCH08fA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:13:cb:95:53:d9:05:50:ea:31:f0:0e:7c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=1d97ace4974980c46969888ddb5d9a768f6c13ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:90:40:af:0c:c2:23:ca:4b:2c:f1:1b:c8:
                    da:0d:3e:dc:e0:5b:4c:59:6c:0a:de:fb:e7:bd:8a:
                    eb:2f:86:58:29:d3:d4:95:a6:3c:fb:e8:fe:79:9b:
                    6b:55:68:44:60:e2:0d:c9:53:1f:b4:76:23:d9:bf:
                    c6:4c:1c:fb:b0:db:05:8f:ac:16:92:14:71:29:8f:
                    55:c3:89:fc:72:1f:3b:b2:00:06:20:37:b4:83:88:
                    6c:a9:e5:a9:e3:cf:3d:d6:49:91:7d:f9:74:09:44:
                    53:8c:43:47:b0:99:b9:a5:52:67:70:e3:a6:25:9e:
                    d6:60:ac:41:ec:cc:87:50:09:f8:34:f6:74:c5:76:
                    3c:9f:2e:c7:8a:90:18:85:2d:56:a1:f9:5a:de:43:
                    49:e0:8d:78:62:c2:37:c7:29:d7:32:35:8a:86:af:
                    5f:b1:17:92:49:1e:91:ce:eb:13:3c:72:c4:e7:c2:
                    5b:49:ea:3a:04:ce:d8:2a:88:fe:d5:05:e2:8d:a8:
                    1a:0e:fe:91:bf:63:cc:d5:96:06:b3:45:dc:b0:91:
                    e1:c4:8c:62:f5:9a:be:f9:b1:dd:99:4d:46:b9:75:
                    9f:85:5a:ff:8a:a9:1c:34:ab:a2:63:a5:57:da:af:
                    40:f4:cc:dc:6a:ed:22:2f:b5:43:6d:eb:5e:58:a4:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:97:AC:E4:97:49:80:C4:69:69:88:8D:DB:5D:9A:76:8F:6C:13:CE
            X509v3 Authority Key Identifier:
                keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e2:c3:93:55:4d:e4:58:a0:95:b6:54:8e:90:fd:0e:48:f6:
         0f:a4:77:97:d3:6c:d1:b5:e8:83:b1:b9:28:9a:0d:dc:92:b2:
         8e:c9:7b:b2:51:b8:31:cf:02:d9:0d:55:80:4e:10:79:34:5a:
         f7:6e:4e:78:6e:8e:d4:50:fe:19:17:38:cd:ca:f4:70:57:9d:
         33:c4:05:f6:b7:b0:21:16:10:87:b3:f2:2a:e7:b5:e1:f4:04:
         6c:a3:de:59:8a:08:dc:d7:5e:42:2b:16:16:7b:b3:b5:88:8e:
         a4:f2:00:db:b7:74:f9:bf:81:d5:62:86:a0:a1:12:3e:8d:47:
         89:7e:ff:78:cd:88:b6:bf:2e:12:7f:47:3b:e4:4d:65:92:2b:
         90:a2:db:28:98:c1:69:c7:90:a2:5a:0c:28:67:2b:1f:83:c8:
         f7:be:0a:53:8f:cf:b8:be:70:8a:39:c2:4f:36:b0:95:36:4e:
         d4:e0:3f:89:9e:a2:94:5e:f0:f1:a8:22:8f:61:a2:22:fb:85:
         dd:ab:40:85:75:80:ee:3f:e9:f8:e1:7e:41:7c:09:72:e0:d7:
         91:40:fe:6a:e1:84:2e:07:ca:bf:69:e8:ff:6b:a1:97:91:bb:
         c0:74:5b:92:c2:cb:f0:41:b8:d1:8c:91:0e:f4:07:06:1f:c1:
         d7:6d:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----