Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          ZLtblIwOHd8jgYt8jy5HYcKTR9rggCJuYiOBI/dw3yw=
Subject key identifier:   43:5B:5E:EB:B8:B3:A3:D0:CD:04:00:A0:98:8C:FF:68:B8:46:3A:F9
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       01962E61D42FC50D1805A8E6D95DE1D0133C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1501
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: /I2/vowcqRd1gXY/sG3z6DWQqhdnGNll+gC71rH6Arg=)
                          3: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (hash: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=)
                          4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          5: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (hash: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=)
                          6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=)
                          11: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (hash: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=)
                          12: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (hash: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=)
                          13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:2f:c5:0d:18:05:a8:e6:d9:5d:e1:d0:13:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=435b5eebb8b3a3d0cd0400a0988cff68b8463af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:31:42:dd:eb:d5:c1:74:41:4e:21:24:44:
                    32:7a:cf:6b:4b:5a:16:20:5c:52:c2:a1:98:8c:4a:
                    1a:6c:a9:25:83:9c:e3:b5:95:ee:37:5b:40:53:6f:
                    5b:f6:2a:db:f9:d0:f6:5d:d3:04:86:7d:92:b4:dd:
                    4e:fb:b3:f6:3d:38:89:7c:99:d2:34:6c:32:7a:23:
                    97:aa:08:e5:c6:72:82:98:df:c8:a4:08:3a:ec:de:
                    eb:b3:d4:0e:ae:45:7f:0a:55:90:2d:83:d4:ca:a0:
                    e7:b4:4a:5d:27:7f:30:e6:7d:ac:40:69:ec:54:5d:
                    f8:68:9c:38:b6:cf:3b:b9:73:77:b1:82:88:45:f3:
                    78:44:23:37:fa:52:64:45:b5:8f:a4:ea:e3:a5:bb:
                    54:74:6b:3f:f6:26:8f:a3:9b:92:a0:6a:f9:d7:72:
                    77:c4:bc:b1:50:11:04:34:87:66:f7:d9:be:0d:55:
                    c4:12:66:38:0b:ba:d8:54:00:33:bc:89:ae:f3:ac:
                    2a:17:0c:d8:56:aa:1a:18:9f:56:04:19:f7:71:c2:
                    9d:27:6b:d5:21:e1:4f:83:b0:f1:de:6c:2b:29:ad:
                    84:f6:4a:a0:30:80:e5:97:4f:70:f1:c6:22:cb:5e:
                    40:a7:3e:a8:c0:00:14:4f:48:49:53:6d:b6:00:4c:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:5E:EB:B8:B3:A3:D0:CD:04:00:A0:98:8C:FF:68:B8:46:3A:F9
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f2:db:2c:f6:0e:a4:e9:74:f3:c7:1a:2c:cb:c0:08:ac:83:
         bc:4b:65:c8:f6:12:ff:a9:fb:c6:f3:bc:8e:83:37:0b:8f:49:
         27:bc:a7:ff:83:0a:10:ed:b8:1f:80:cd:26:13:9e:53:0c:9a:
         3d:3f:6d:95:cb:81:93:2b:66:d2:e1:6d:8a:70:4d:87:c3:28:
         6f:d6:e8:26:df:0b:aa:26:f3:b4:3f:f5:a6:f9:81:a7:e2:73:
         d5:35:d9:e9:bf:c4:95:2c:cb:a9:4f:01:30:4b:ad:e6:d8:fa:
         37:23:e2:43:7b:20:c7:fa:ee:3d:d1:01:53:00:cd:d0:1b:01:
         ca:83:d6:8c:54:2a:21:0d:ba:38:32:1d:04:25:3a:e2:c8:cb:
         5a:08:df:20:00:dd:7f:a4:db:18:b2:25:5b:e8:8c:9c:75:9b:
         f2:b6:3d:e7:e0:99:b2:c1:b3:f4:f1:63:af:e5:87:4a:fb:92:
         86:17:85:4e:a5:5d:cb:1b:37:b4:99:5f:0a:0b:76:0c:93:39:
         3c:be:58:ec:aa:b8:bd:d4:7e:64:79:9c:09:12:64:7b:6f:03:
         30:82:21:a0:79:31:84:95:70:da:02:fc:f7:40:1f:c5:7f:96:
         1d:de:95:04:3b:fd:12:3d:00:16:7f:03:be:ac:c5:80:34:21:
         fc:31:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----