Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File:                     rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier:          ZqwRzDB2tffw/l3NaFCXMXCPpop2EcUhqszgSFo7jdU=
Subject key identifier:   58:97:8B:31:10:31:AA:5C:54:BE:1B:85:EC:73:EE:F1:87:CC:AA:63
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer:       /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial:       01962E2AFF934CD60EDE48FAE843C8B55EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
                          2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
                          3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: G+mpUVOD0a02t5NvFAqvLxq2YMa4RNoEhUUW30TSMzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ff:93:4c:d6:0e:de:48:fa:e8:43:c8:b5:5e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=58978b311031aa5c54be1b85ec73eef187ccaa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:28:57:67:c2:e4:d3:99:49:cb:10:61:dc:
                    15:dd:12:37:80:ab:2f:a0:37:e3:01:15:f1:66:e1:
                    09:d7:b1:05:c0:17:d5:a1:e4:92:2e:42:63:ba:58:
                    e6:02:40:eb:9e:11:84:03:b5:68:93:e2:1b:4c:a0:
                    ea:99:61:e3:9b:f2:ed:61:bf:0b:c1:d7:33:f6:21:
                    34:18:04:26:c0:67:fb:81:7d:50:dc:d5:1e:a2:76:
                    f8:25:d4:35:57:3f:10:41:3b:da:82:02:f1:de:79:
                    35:3b:9a:d4:de:02:83:53:87:eb:da:ab:55:fe:f4:
                    e7:d0:7b:b8:98:e7:e7:d4:3c:52:a6:0e:f7:3e:7e:
                    3c:9b:b1:3c:2b:39:32:d6:03:80:2e:36:32:f6:04:
                    14:5d:45:60:3b:98:9c:01:78:83:21:d1:91:4e:9d:
                    b5:86:7c:c6:66:75:0a:41:85:20:1e:d9:8d:72:6a:
                    1a:7d:d7:a1:3d:1f:60:01:66:c5:4f:c8:a8:23:5a:
                    25:b9:6d:3c:2a:ab:72:bb:cf:dc:d7:24:d7:58:e7:
                    a9:98:97:e9:de:d2:41:97:3f:4a:c5:57:07:60:8a:
                    72:62:8e:6d:93:97:4a:d9:07:a5:78:f1:fe:bb:3a:
                    e2:2f:03:31:77:ce:a0:5b:9f:b9:98:77:a2:75:15:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:8B:31:10:31:AA:5C:54:BE:1B:85:EC:73:EE:F1:87:CC:AA:63
            X509v3 Authority Key Identifier:
                keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:1c:45:1a:13:0a:f2:65:41:78:43:4c:ef:45:53:5c:29:
         35:f1:39:3a:71:8d:4e:5c:f0:dc:d0:cb:16:fa:33:ba:72:c6:
         45:18:4a:25:c6:f2:29:06:76:3d:b7:0a:c1:0e:8e:bf:d0:97:
         f6:0b:2f:d8:94:8d:8d:6b:30:67:99:b0:c2:b7:18:bc:e4:3c:
         5a:e1:8f:ea:24:9b:0f:39:78:d0:73:e9:99:6a:08:31:2c:40:
         a9:f8:43:ee:dd:1c:c4:88:67:85:74:dd:c1:e4:5f:ac:73:90:
         52:95:41:c8:cb:02:96:49:39:e6:ef:2c:e4:31:e0:95:42:42:
         99:6a:d4:14:2b:c6:1a:87:86:5a:8e:a7:70:31:4f:ed:6b:5e:
         60:04:9f:96:7b:02:b8:a4:19:4f:4c:8c:d9:db:73:e7:7a:6b:
         35:b1:84:4b:3d:19:28:06:0f:37:27:22:04:95:59:7f:b9:73:
         21:7c:54:97:16:63:cd:a0:3c:10:f0:a5:fb:04:d6:51:41:d2:
         91:f4:67:a7:f1:be:99:17:4a:62:de:48:3e:f3:a5:64:99:ba:
         a6:b7:c4:71:79:69:5d:c5:98:ab:62:ef:a2:b0:25:09:93:11:
         7d:68:07:1b:84:ef:8a:ca:5d:9a:15:d2:33:7f:41:61:93:fa:
         a7:5c:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----