Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File:                     Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier:          pzJOBooXeAoLKS83IWfvZSXgMLtHG5G6EMy/3EecChQ=
Subject key identifier:   4F:AE:DE:EA:7D:FA:C8:F7:38:4E:DB:19:BB:54:DC:E6:BA:0E:CE:81
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer:       /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial:       01962DF4328D5662BD7DE24624F649EBED35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
                          2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: 37ec0uy1I4Pv/+bjj4isDb7wVLLL1PUw2PqGWzZQl9E=)
                          3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:8d:56:62:bd:7d:e2:46:24:f6:49:eb:ed:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=4faedeea7dfac8f7384edb19bb54dce6ba0ece81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:f6:d7:5a:c8:64:fa:a1:c8:a7:5a:dc:cf:
                    7e:7c:4f:72:9b:75:47:fa:0f:77:f7:f7:19:15:be:
                    f1:2a:b7:84:2a:b2:d6:49:2f:9f:06:d9:b1:f7:bb:
                    31:6c:61:21:c9:4f:9c:53:44:ad:8c:28:fd:95:9e:
                    46:a1:f7:64:16:7f:ce:56:90:c3:3b:51:8f:55:ff:
                    a2:b5:69:b7:5a:3b:fa:df:ac:01:20:5e:e7:f7:a5:
                    da:de:ff:23:43:68:ca:87:92:22:ba:7f:13:29:31:
                    46:52:52:10:df:88:e1:07:ab:86:32:c8:e2:2a:a6:
                    77:fb:df:67:b2:46:14:70:dc:e5:b5:3f:a3:3a:f2:
                    65:b1:d5:5b:19:21:45:b3:89:0e:d6:45:88:33:6c:
                    de:30:37:c8:88:c8:da:d4:87:04:8b:7e:03:8a:b2:
                    d8:50:e7:3a:67:53:f9:56:b9:8e:9a:b7:e4:b3:20:
                    b2:6e:85:a6:74:33:32:7e:ae:8d:16:30:07:29:2e:
                    70:9e:7c:75:95:00:d6:db:0e:85:1e:fb:be:0d:8f:
                    f7:74:bc:f7:5a:68:01:24:bb:30:7c:78:f2:b7:f1:
                    ed:30:ed:85:bc:29:70:b4:0a:64:d0:33:31:93:06:
                    d8:e6:51:a1:31:61:7c:b5:b0:67:dd:9a:19:cd:74:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AE:DE:EA:7D:FA:C8:F7:38:4E:DB:19:BB:54:DC:E6:BA:0E:CE:81
            X509v3 Authority Key Identifier:
                keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8c:86:41:99:70:e7:9a:fd:e4:3b:d3:05:94:40:71:38:fd:
         a2:5e:69:b3:cd:3b:96:13:7d:c1:57:e1:ae:85:d6:75:db:7b:
         4a:68:07:2b:7c:0e:f3:48:99:a2:2a:27:20:a4:90:aa:a9:fd:
         9d:7e:8a:87:f9:aa:5a:47:d3:d4:aa:f3:f0:ae:43:d2:2f:7d:
         47:e0:e2:a9:72:20:22:fa:c2:01:34:83:5e:ee:db:51:22:2e:
         41:76:93:14:bb:c8:d1:1c:ab:8f:23:b2:c8:ba:52:0c:46:11:
         f3:c4:1f:81:d2:93:be:32:b3:16:43:f2:8f:cf:ef:84:98:a3:
         35:3c:f5:79:40:34:87:20:c9:f7:b6:1f:09:c2:31:ac:ea:fe:
         ec:6a:28:9f:17:86:96:d5:85:34:37:a8:26:57:8a:3b:a5:d9:
         6c:8b:06:77:cb:e6:7e:b0:2c:14:ad:52:51:d7:9f:71:b0:f8:
         fd:15:80:b4:8c:b6:ec:da:4b:11:ce:22:f6:b9:d6:1e:8f:22:
         43:7d:be:32:d0:e6:41:09:97:9b:d1:be:6f:7c:b7:4e:ed:67:
         9b:23:ee:bc:14:ba:34:eb:76:15:ee:01:29:c0:3b:47:44:1b:
         92:0c:a8:39:5c:11:e2:b1:a1:53:fa:a9:18:c7:0a:f4:0c:db:
         8c:15:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----