Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File:                     dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier:          2oKzqujwOyr+iLrlqzj/qnecbWuYRJ5For0iQkFnFXo=
Subject key identifier:   AD:3C:14:A8:32:61:3A:7C:4B:0E:A6:D3:40:79:00:62:EC:42:AA:FA
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer:       /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial:       01962E61C903195E42AD9B59F05A4E26FEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
                          2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: gJSfC06Xe4JZw8BBluYKaE/8V3fGew55VG9BUdQEYF8=)
                          3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:03:19:5e:42:ad:9b:59:f0:5a:4e:26:fe:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=ad3c14a832613a7c4b0ea6d340790062ec42aafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:5f:4d:5c:b5:c0:17:93:2c:d2:8f:74:15:
                    32:e7:c9:b0:c9:53:e9:d6:95:64:96:9c:da:da:4b:
                    41:5e:64:df:5c:d2:c8:c9:5b:99:9f:ef:6a:76:ea:
                    15:2a:7f:e8:0e:6e:9c:54:eb:d6:ad:fe:f7:2a:49:
                    bd:ad:bb:38:c8:12:e6:5d:9a:e1:b0:82:f7:cc:a2:
                    95:2a:c1:68:c2:a7:33:97:b9:f2:dd:6e:ec:e7:94:
                    43:c1:27:95:0f:bb:32:a8:0d:59:a9:24:d7:28:0d:
                    ea:79:8d:77:33:41:c8:c2:2e:cd:f1:c4:68:38:34:
                    d5:1a:13:84:d9:3d:03:dd:a1:2b:77:c6:61:5b:fe:
                    ee:b1:65:b0:01:94:aa:91:dd:1f:f3:a8:61:9e:07:
                    6e:7c:65:fc:ff:3c:ec:fb:64:6a:ac:69:d1:e5:d9:
                    0f:5d:58:32:fb:24:ba:c2:d7:e9:29:de:36:88:a5:
                    c2:f3:97:60:d6:d9:dc:23:8e:f9:48:4a:b7:39:a4:
                    6c:cb:04:a5:e0:44:b2:64:f5:88:06:72:1b:3d:f1:
                    48:22:92:91:05:d8:e8:af:49:3c:56:ae:76:e7:93:
                    2a:52:c1:c1:88:11:7e:17:3e:73:bf:1d:0d:09:00:
                    73:46:a6:48:23:ab:c1:bb:cf:66:1c:0e:1b:e4:12:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3C:14:A8:32:61:3A:7C:4B:0E:A6:D3:40:79:00:62:EC:42:AA:FA
            X509v3 Authority Key Identifier:
                keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:61:28:1b:77:5c:15:38:82:12:22:98:24:01:81:00:b3:
         9e:21:56:aa:33:96:4a:ad:4c:e3:fd:4e:26:dc:20:c1:c8:f2:
         f6:1a:27:ae:36:73:16:af:5a:a2:fc:06:91:32:9d:96:e2:39:
         5f:40:d2:31:40:2b:b4:af:69:fa:83:95:4f:51:5a:c9:20:18:
         d3:5a:62:fc:b1:12:78:a9:0b:c4:2e:63:a0:6f:26:f5:52:3b:
         06:6d:c8:c0:df:09:37:91:f5:50:ce:14:ed:c9:9f:c7:d4:bb:
         24:6d:fc:cf:61:3e:b3:49:48:c2:b6:e0:80:d8:6c:92:cc:31:
         11:66:c2:55:19:3e:c1:a1:4a:b4:51:ce:c3:d8:49:94:af:eb:
         e9:92:49:27:7b:fa:d7:89:16:32:72:6b:ca:c9:d5:27:ec:c5:
         59:a4:0b:b7:f0:bf:f0:52:d9:a3:c4:51:78:95:ad:8b:8d:ec:
         5d:95:87:a9:46:85:8f:a3:7b:b7:98:ae:a5:7d:ea:2b:a9:0c:
         1f:31:b0:32:a6:38:3a:53:15:14:73:69:e9:b6:e9:b9:1a:e4:
         45:a6:43:40:58:eb:71:9c:c6:54:cb:60:84:64:76:72:df:90:
         51:d2:43:ea:fd:c8:e7:95:0b:ba:e4:f1:01:19:c3:b5:94:2d:
         f9:ed:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----