Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File:                     X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier:          nwiDDUKeL/r+ScAr7iWiCMPjV08Cudo0L0bsb6IbnKs=
Subject key identifier:   B2:CF:74:62:79:EC:DF:7E:3E:FB:02:1B:B9:DD:88:AA:64:B6:82:3F
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer:       /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial:       01962DF3B7DA198E25DC8CA89B85A4B31D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number:          0503
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: spu6dwO/MYra0TCmi+aaooKZ4FkQF+UD/RmfZyVqYbQ=)
                          2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
                          3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b7:da:19:8e:25:dc:8c:a8:9b:85:a4:b3:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=b2cf746279ecdf7e3efb021bb9dd88aa64b6823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:7a:f1:46:ba:b1:e7:cd:6e:b4:bd:7d:75:
                    26:bc:b7:39:95:14:1f:51:7d:a2:56:84:dd:5f:2d:
                    ca:62:2c:4c:c2:f8:ef:2f:b2:ac:16:25:65:7a:e5:
                    d3:64:6b:86:a9:bc:49:eb:c4:47:fd:21:83:25:69:
                    3a:03:1d:bf:a5:57:19:81:59:e9:11:88:fe:03:7f:
                    0b:f4:c8:40:f6:a5:3e:4f:56:de:14:80:76:13:13:
                    5b:a3:28:66:08:c2:8e:39:58:63:46:92:e4:60:6f:
                    df:ed:28:36:a6:6d:49:66:58:70:df:10:c8:a3:7e:
                    07:2e:2f:b5:71:00:80:5b:7c:7c:3c:39:67:91:48:
                    68:15:9c:2a:a4:46:75:bc:8c:fb:97:98:c7:a8:62:
                    bb:f0:72:26:ec:09:d8:40:73:4f:e8:f3:64:c8:c5:
                    85:b0:b2:50:c3:4b:69:47:b5:a7:e0:aa:02:61:d4:
                    2b:49:01:a9:a9:1e:08:7a:1a:3a:d1:8b:4b:97:c3:
                    34:70:62:e3:83:80:8d:ab:e0:56:de:57:f9:ed:1c:
                    2f:ab:c9:18:b0:4a:d9:76:42:43:89:37:0a:25:06:
                    ea:91:91:04:dd:55:00:29:3d:5d:1f:2d:fa:0d:88:
                    84:42:26:cd:07:4f:22:58:d0:dd:93:ad:8f:76:89:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CF:74:62:79:EC:DF:7E:3E:FB:02:1B:B9:DD:88:AA:64:B6:82:3F
            X509v3 Authority Key Identifier:
                keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6e:42:27:ea:14:29:2c:5a:de:49:cf:5f:2f:70:1c:66:a1:
         2f:b3:ee:4f:6a:db:27:57:45:2b:89:c6:f3:13:f1:80:df:6c:
         37:11:33:a4:90:1d:26:bf:a0:ef:9d:b8:e1:4c:f2:5f:91:d8:
         7f:01:f1:0e:a5:ad:aa:c0:65:33:d9:b3:6a:dd:7a:56:3e:79:
         84:7b:89:e8:66:2a:28:9b:75:4b:90:98:44:70:0e:27:63:34:
         1f:bf:53:c7:af:09:a4:a1:d8:17:2b:24:97:c2:a9:c8:08:e1:
         9e:78:be:21:a5:d4:f7:de:36:7c:bd:53:45:df:a4:9d:10:8c:
         3b:65:a3:de:42:0c:21:44:cb:c9:eb:3c:c5:44:21:90:d6:13:
         88:02:c8:7d:b3:d0:b6:e6:54:2c:d3:6d:b6:13:0b:40:58:f4:
         b1:38:76:93:ec:ec:4f:93:b0:92:98:55:1d:f5:bf:8b:bb:e8:
         2b:09:d3:ae:e4:81:57:4f:21:a0:cc:bb:f9:1c:1e:32:4c:96:
         7d:9b:a5:bd:64:90:1f:69:78:8f:51:15:9b:c3:e2:75:c2:f7:
         1c:77:82:ab:bd:43:11:0f:bd:c1:16:2b:87:50:b7:a5:86:46:
         31:83:1c:e3:e6:38:b0:46:a9:f9:57:72:b5:f5:16:e7:35:0f:
         9b:ec:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----