Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File:                     4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier:          pIP4b6ZP6/QDikWUW8q3QWxExbUxshPSlCte6VDNlfs=
Subject key identifier:   D2:00:AF:DA:F9:00:17:C8:B9:6A:90:20:B8:C9:8A:9D:33:C7:A9:25
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer:       /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial:       01962E61CCC2B0C2759ED1087BE52C0435A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number:          05F2
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
                          2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: I/41chGQp0upilp9PAgdsbMnU5+abkEi5ncY8mHHY60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:c2:b0:c2:75:9e:d1:08:7b:e5:2c:04:35:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=d200afdaf90017c8b96a9020b8c98a9d33c7a925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:fc:cb:4e:e9:07:3c:7a:51:94:da:da:08:
                    bc:99:b0:25:fb:3d:e6:db:3e:d9:42:95:ed:d7:e9:
                    67:3a:aa:1b:3c:5a:94:bc:ca:50:ff:82:63:e1:9b:
                    71:27:5b:a6:e7:82:36:b7:1d:35:3b:bd:73:a3:a4:
                    84:71:d3:3c:d9:78:03:89:fa:90:aa:49:b0:6b:ed:
                    4e:96:60:51:20:97:af:87:b9:54:7b:b1:e2:f7:a0:
                    c0:69:16:43:21:22:71:44:b2:55:4e:fb:3e:3b:1c:
                    04:fb:7c:c6:4b:90:23:e6:05:1d:21:1b:e2:a5:f2:
                    60:36:1b:73:ad:5e:f6:61:9d:8a:64:d4:0e:46:59:
                    81:2f:c1:19:a6:ef:f5:f9:89:2a:cb:d7:94:8a:a0:
                    62:37:14:aa:55:ee:b4:b6:96:41:9e:bf:b6:9d:6e:
                    68:95:b3:90:ce:81:ff:04:4f:9f:3b:c5:22:c8:9c:
                    4b:3a:44:98:4e:12:c6:fb:b1:c1:27:db:7c:23:16:
                    97:d9:ab:57:3d:0b:7f:8b:c4:3d:7f:c2:99:37:fb:
                    e0:1a:be:16:34:a1:4c:bf:50:8b:31:22:0e:61:7d:
                    03:f5:7c:8f:f2:62:7d:70:e4:1c:72:3a:27:3b:e0:
                    34:ba:e2:a5:1c:9e:55:5b:cc:3a:88:2f:d9:32:9b:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:AF:DA:F9:00:17:C8:B9:6A:90:20:B8:C9:8A:9D:33:C7:A9:25
            X509v3 Authority Key Identifier:
                keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5b:e6:12:c3:89:26:b3:c8:cd:33:df:2f:7e:1f:64:f8:f8:
         03:78:c4:d0:81:88:ea:b3:f6:08:14:41:b1:0b:37:16:aa:15:
         83:16:42:20:8f:ac:0f:cf:49:d5:c7:5a:97:80:ed:ac:cf:f0:
         15:46:68:99:f8:c3:c8:8c:ec:2b:18:fc:fc:f9:c5:f5:ea:f3:
         48:ba:87:73:6d:97:cb:f8:f9:2f:10:6f:82:ad:d0:c6:9d:fa:
         67:49:5a:a7:5f:9a:ae:43:29:f4:f8:1e:61:76:b7:0a:7b:fe:
         9c:80:0b:42:6b:eb:f5:7e:a8:83:6f:1a:bc:1e:88:79:d4:61:
         17:ba:f5:b5:64:0e:2c:9c:ae:82:4d:59:b9:58:52:b4:d1:21:
         85:ba:91:2c:4c:b9:75:28:4b:72:2f:d5:81:26:b9:15:8a:fd:
         2f:3e:36:40:03:04:cb:e9:64:29:d0:22:53:f3:b0:46:9f:d7:
         6d:78:98:34:2e:0d:52:07:82:61:62:6d:02:e9:10:4d:24:c6:
         6b:4a:06:c8:f3:7a:99:6f:b8:8b:11:3a:9c:81:b0:e7:85:38:
         56:1e:d2:9a:ce:c1:67:13:7d:9b:5e:91:ac:6c:63:85:0b:ec:
         7c:78:ea:35:eb:2c:ca:76:48:ad:f7:ea:e6:96:97:a0:2c:ac:
         7a:49:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----