Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          +MLzn+Z2/DIDO/cEjEaqHq7Tya/zyganv8MvR+4juko=
Subject key identifier:   DD:8E:D3:5C:91:0F:A5:3C:6B:8A:EA:DE:C1:98:4F:91:8A:58:3C:0C
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       01962F749CD5972261B1B82BC525D3D6B61C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          14A7
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (hash: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=)
                          2: GRF2bMt45GUg8Rs22zB5kafSnfw.roa (hash: POA0gjYA6M0Utx5jRtzJV0tvSkimO4coFlCnQ2NmufU=)
                          3: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          4: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          5: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          6: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: qrYNgLrG5cBhBZBYwMnFe8YU4jBA/xHk7zKPXZaHkt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9c:d5:97:22:61:b1:b8:2b:c5:25:d3:d6:b6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=dd8ed35c910fa53c6b8aeadec1984f918a583c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:19:c9:19:6b:39:c7:93:7b:c6:ab:4e:a4:
                    df:17:e6:38:5e:f5:10:16:cf:00:e6:3e:5b:f9:6f:
                    6a:72:db:90:c8:52:76:47:59:e0:82:98:91:a3:74:
                    ca:c7:53:f9:23:e7:50:1c:69:ba:a4:4d:80:1c:14:
                    dd:40:e7:43:e4:75:0d:28:45:81:e0:3f:d4:87:2c:
                    e3:8f:4d:1e:20:bb:bb:7f:35:49:ad:be:a3:9a:34:
                    9b:a9:25:58:4e:86:3d:43:bf:91:e5:5d:48:06:78:
                    36:41:16:28:cd:25:a9:dd:b2:4c:69:e1:53:c5:ce:
                    fc:36:2c:d7:8b:63:73:5f:d3:75:e3:ac:31:bd:fe:
                    3a:20:51:68:60:1d:ac:d2:1e:3d:a3:ac:22:aa:99:
                    ec:76:64:09:15:7e:39:15:17:4e:ce:fd:22:03:08:
                    28:ea:c8:e9:e3:7f:f7:5f:12:c9:cb:16:ae:67:90:
                    13:0d:bc:62:99:e8:15:fd:55:9d:e0:ef:8b:04:13:
                    a9:8f:62:72:38:3e:c2:ef:39:04:81:11:61:84:64:
                    47:a9:5b:4b:58:50:87:ba:a0:bf:29:61:66:32:ab:
                    d7:ac:ed:fd:e2:92:3e:eb:8f:00:45:18:6c:bf:7f:
                    8c:f1:5f:ff:ac:25:2a:a4:c0:d3:5c:ea:0c:af:56:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:D3:5C:91:0F:A5:3C:6B:8A:EA:DE:C1:98:4F:91:8A:58:3C:0C
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:56:e5:72:5a:45:e8:63:e4:28:6b:ec:1c:b6:a6:26:fa:34:
         f6:65:a5:bd:e6:21:fa:24:f0:8c:bd:68:81:09:d6:a4:14:fc:
         93:f6:b4:07:c5:b8:a1:0c:12:f2:ab:59:09:bd:b2:5b:a8:3a:
         51:db:1e:4d:e9:e5:23:19:04:68:c2:39:6a:e9:5b:fb:ec:a2:
         68:2a:36:87:ac:d1:4f:98:fe:8a:ef:fe:40:2a:1b:58:4b:53:
         12:00:26:70:0a:da:85:f1:7d:87:fe:50:76:16:9a:59:cb:d8:
         17:cc:42:ba:78:72:e3:72:cd:07:f5:da:be:5a:7c:fd:75:99:
         7b:cf:ea:20:eb:01:43:d4:c8:be:63:f3:0e:a5:9b:cf:26:9e:
         57:93:e3:68:5f:b2:1f:bb:fc:0e:7f:dc:de:70:a1:89:4d:0f:
         7e:51:98:61:35:cf:69:8c:d2:52:12:1c:d7:b6:34:5d:34:fe:
         40:a4:aa:26:df:df:88:c9:fb:b2:51:f8:7b:4d:a8:85:e8:a9:
         41:88:c0:d9:6e:83:2a:d0:c2:59:17:ff:40:1a:e2:a7:f7:56:
         85:9a:fe:25:22:a9:c4:f0:99:c4:a9:fd:16:ff:41:3f:ae:02:
         12:11:5d:6b:70:cc:df:81:d8:09:7f:25:b9:05:23:82:19:09:
         a8:1e:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----