Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier:          E+RP3wj+Vea4Oi2XySlzMX+XRMq9xdNlxsejtAxfGhg=
Subject key identifier:   91:B2:49:16:58:A5:34:B1:A4:D4:65:5F:D8:0A:13:F1:6E:C3:DE:73
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       01962F0714546553C5C1B4C4B94538D3D813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:55 +0000
Files and hashes:         1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
                          2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: xgZKY9ET5wxStSAqMTfLb1TPmZswdk6cIXEjh8Kp4A4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:14:54:65:53:c5:c1:b4:c4:b9:45:38:d3:d8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: Apr 13 12:01:55 2025 GMT
            Not After : Apr 14 12:01:55 2025 GMT
        Subject: CN=91b2491658a534b1a4d4655fd80a13f16ec3de73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:30:7b:ee:c1:7c:68:a0:50:1c:96:3a:75:
                    91:5c:45:15:b2:3a:08:3e:72:f0:9c:27:47:6f:58:
                    31:ee:f6:d4:53:8c:5a:47:86:ba:52:91:43:fc:8f:
                    e8:ef:5c:16:eb:58:d5:0d:48:83:37:d4:a2:bc:99:
                    01:1d:d9:62:8f:2e:53:0a:f7:8a:2a:4f:91:1f:64:
                    81:24:b6:77:df:0f:29:67:5d:aa:b2:17:a0:8d:b1:
                    1c:fe:1c:fd:5d:34:5d:3c:ed:50:bd:44:83:bb:cd:
                    9c:93:30:8f:fe:36:42:81:ae:0f:17:00:b7:d3:aa:
                    0a:f4:63:64:84:0e:e6:46:56:3a:82:15:0a:ce:98:
                    40:7d:1c:1b:93:96:f3:a4:b9:5f:f9:bb:31:f7:6e:
                    99:be:17:7b:d6:5a:df:1a:15:51:bb:47:de:ee:b3:
                    10:d5:ba:43:d5:dc:c7:13:e1:a0:70:47:0d:95:86:
                    64:6d:3e:ff:32:2c:ac:69:03:45:13:f6:ed:aa:5c:
                    9f:a1:f1:8f:4e:ca:55:b5:37:52:fe:ba:29:5f:48:
                    62:34:ea:10:d9:a8:69:a6:9f:81:e3:b5:2a:a3:56:
                    d2:46:e4:bc:9d:fa:15:22:dc:1e:fe:ae:62:b0:d0:
                    96:22:f5:bc:53:a1:48:28:2c:c8:de:e9:a5:94:40:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:49:16:58:A5:34:B1:A4:D4:65:5F:D8:0A:13:F1:6E:C3:DE:73
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:b0:1e:c0:d1:14:4a:43:f7:af:b5:d1:25:fd:5b:de:30:
         4f:02:c6:8a:fe:f2:ef:e6:92:73:34:06:e9:00:11:17:38:04:
         fc:dd:73:83:76:f0:5f:1d:0f:e8:06:85:3e:5a:f9:1b:42:cf:
         34:84:d1:6a:1e:90:70:9d:4b:fa:12:bf:bc:03:4a:ad:f4:97:
         48:00:cd:e8:10:c5:2f:87:34:bf:6e:08:e8:c6:1a:40:e8:6a:
         5a:d6:ac:f1:38:e0:88:f9:45:2b:8b:b5:68:f3:d8:d7:0d:b2:
         e3:0f:bb:b2:51:ab:40:41:3e:e4:bf:23:d1:26:8c:fd:e3:f3:
         33:99:c7:9c:c1:82:a0:e3:48:f7:41:6f:f1:1c:70:37:6d:96:
         63:08:89:67:7d:d6:3e:86:0f:f5:a0:75:b7:25:ae:10:2a:fb:
         69:d8:06:0e:8f:33:c0:8a:f2:ec:9b:94:19:77:17:1d:ed:5f:
         ca:d1:23:80:06:f6:e6:e4:e8:20:e5:17:34:10:a9:ef:0a:c5:
         a8:43:c9:5a:73:44:bc:43:a6:8f:be:cf:13:36:3a:50:2c:c9:
         0f:28:84:53:04:9f:16:9e:db:75:32:04:0e:1f:73:cc:8f:10:
         d9:84:03:7e:be:60:15:d6:2c:95:5f:bf:84:7b:8f:92:d1:0c:
         08:f2:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----