Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File:                     1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier:          EzpJTIH5uOtuvmPvo2DOukjdVsIdmSZ/aUnSQtrn9Us=
Subject key identifier:   B5:CD:6F:A3:B8:A0:61:7C:F2:66:BC:BF:25:26:6D:B4:E5:49:2C:C4
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer:       /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial:       01962DF41D1D638D02CECD39C0C887400C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number:          0429
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
                          2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: rvpcHntlLGzKWI3u1dvw3tg0lkl1vxYgeaMOnneZ5IM=)
                          3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1d:1d:63:8d:02:ce:cd:39:c0:c8:87:40:0c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=b5cd6fa3b8a0617cf266bcbf25266db4e5492cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:fc:58:09:f2:98:81:fa:f9:dd:b0:92:0a:
                    db:61:67:0e:a1:ff:51:82:29:a4:c0:2f:e4:92:63:
                    08:65:7e:02:83:7e:b4:a3:95:c2:11:cf:7a:ab:24:
                    b0:91:41:a9:34:f6:fd:4d:25:63:24:c4:f1:45:70:
                    44:a7:20:e2:00:e1:f6:97:4f:20:d4:31:45:1b:51:
                    40:be:83:08:e9:f1:26:b3:2d:8a:14:ab:34:f6:dd:
                    e0:4b:46:0c:5e:4f:aa:00:66:d6:4e:57:f0:a3:b7:
                    74:7a:0b:b8:e9:c6:af:26:bc:12:d3:bf:28:9b:e6:
                    47:30:3a:3b:e0:0b:a0:43:a1:b6:67:7a:79:67:cd:
                    0b:b7:8a:ed:e7:bc:e2:ca:10:ed:f9:5b:38:c1:34:
                    5f:b8:13:f6:0f:98:33:4f:77:7e:3b:4c:3f:d6:13:
                    0c:13:a9:e1:6a:bf:71:7e:f3:6f:d3:8c:db:0d:dd:
                    5a:16:bb:4f:39:b5:f2:28:c3:2e:97:f9:66:a9:9f:
                    79:58:68:9d:67:52:e8:24:a4:6f:ea:4e:68:b3:e0:
                    ca:63:7b:5e:b7:d6:b1:9a:07:43:bf:27:c4:ba:6c:
                    ac:e8:2b:07:78:2c:d0:74:5d:8a:ea:4a:2e:6c:0f:
                    f1:2f:d3:4a:a8:66:f7:51:37:a5:5f:5a:02:07:15:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CD:6F:A3:B8:A0:61:7C:F2:66:BC:BF:25:26:6D:B4:E5:49:2C:C4
            X509v3 Authority Key Identifier:
                keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:08:f9:5d:74:d2:02:14:ce:0d:b5:4f:38:0c:8e:b7:68:81:
         8b:c2:d9:d9:8e:e1:96:62:a5:17:4c:f6:6f:a4:af:41:d5:80:
         66:b0:13:d7:2c:f0:6f:9c:d3:e3:fc:2c:79:8b:b1:8b:94:a8:
         86:44:73:c2:c9:c1:46:64:6c:d3:b3:2c:e8:df:a0:eb:ce:c6:
         ae:81:c6:28:42:83:22:c0:2d:e9:1d:32:28:27:b8:8c:20:fd:
         4e:68:96:d0:d4:0f:af:71:cd:28:ba:94:82:b9:2d:73:a9:22:
         e3:6b:8b:0e:f6:39:29:2f:48:24:79:1e:12:dd:1b:5a:5b:dc:
         50:d1:01:9b:25:fd:4d:c0:cc:05:9a:45:a1:ea:4a:2f:0a:f8:
         ef:ea:c8:e7:82:67:dd:72:b8:b3:82:38:bc:f3:9a:b0:9f:fa:
         b5:a8:f0:a4:3c:18:4e:9f:9f:06:14:e5:a0:35:9a:e5:d7:b9:
         f9:91:51:59:ab:4e:a8:22:e1:2f:0f:80:6c:52:81:d3:24:d4:
         1a:ad:2b:dc:e2:f5:c2:57:ed:55:ee:0f:b2:5b:4e:02:e8:80:
         71:0f:ec:62:76:79:0b:de:64:b4:aa:60:91:23:23:56:86:c8:
         a5:bd:db:4f:32:d7:87:36:4f:11:71:f6:e0:aa:64:9b:30:92:
         2a:6d:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----