Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File:                     xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier:          oSOYoJDcL/3LuujNHkX00zVKunN9bsSQccZfwL2BhEw=
Subject key identifier:   04:7C:99:86:9B:8C:2E:00:23:AD:A6:3A:36:89:9F:3D:B4:77:56:32
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       01962F06D8E4229F25B0D314B87E13C1D823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (hash: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=)
                          2: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
                          3: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
                          4: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
                          5: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
                          6: RJmPIiHTRu2ZejdfSlAj6IdU6us.roa (hash: 7h/45UxkROh44H9OUOI/NiMHeRQHJxLpEBRuLX6IZ+w=)
                          7: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: atxBhFfkIdl7h5Xgp0g2EX8eO7Fa+1DBokAoFCR08TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d8:e4:22:9f:25:b0:d3:14:b8:7e:13:c1:d8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=047c99869b8c2e0023ada63a36899f3db4775632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:21:9e:6b:56:8a:81:73:fe:7d:42:52:4f:
                    72:ea:6a:ba:d0:e3:1a:84:59:4b:1f:0c:72:7a:e4:
                    54:8c:10:27:1c:56:34:53:8d:61:5a:69:90:2e:4a:
                    d4:b2:cc:fa:09:c6:05:23:49:0d:cc:f5:d1:35:31:
                    11:0b:3c:e8:74:f4:36:20:f5:a1:10:ad:36:f9:1d:
                    c2:1a:a6:fd:59:2d:a3:66:03:88:44:23:c3:a0:58:
                    c2:a2:db:6b:52:42:1a:73:75:90:27:28:2b:b8:c6:
                    a3:3c:e5:1a:43:18:85:33:31:b8:dd:de:ca:14:54:
                    b3:01:e5:08:e1:b2:30:34:d1:69:a5:aa:58:87:68:
                    d0:9c:4b:58:2a:ef:00:b1:98:71:21:5c:5f:c2:41:
                    6a:70:fd:cb:b2:7d:d0:eb:5a:19:ae:26:d6:3c:e9:
                    9f:ad:e2:ba:3d:52:7d:86:df:c3:7d:9f:3f:59:46:
                    75:75:72:a3:8c:ec:2b:ec:fd:55:f0:96:75:99:68:
                    bf:24:43:7d:4d:e7:a1:c0:ae:73:e1:91:73:df:99:
                    7c:90:cf:f9:00:5a:87:62:f1:92:ae:c3:7b:30:95:
                    7f:be:b8:a4:a3:a3:00:58:77:3c:61:44:ad:cf:19:
                    11:e3:46:13:ec:c7:9b:bf:56:f6:b9:c7:5b:9d:e9:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:99:86:9B:8C:2E:00:23:AD:A6:3A:36:89:9F:3D:B4:77:56:32
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:66:52:7a:ab:43:6c:34:c5:53:a4:85:87:cb:3b:a6:1d:
         36:c4:9a:99:57:6e:87:87:e4:7a:d7:da:b6:d6:1a:3c:38:bc:
         c6:00:bd:fe:24:ee:80:ae:ec:60:f6:69:69:8e:65:ee:1e:b5:
         8e:14:25:07:34:69:cb:61:5a:17:6b:11:78:46:98:88:b1:99:
         32:34:f7:41:36:16:da:6b:08:52:56:5a:9a:4b:2f:40:b0:fb:
         36:3d:1a:de:03:df:2c:c0:99:70:f9:6d:ba:78:db:26:6a:98:
         34:b7:c7:b6:79:a2:56:4d:dd:16:dd:bf:59:3f:f1:17:2f:af:
         65:ad:95:d8:98:fd:a8:70:25:bf:dc:86:b0:ce:76:61:a4:7b:
         a6:58:c9:8e:db:e9:97:c4:b4:85:9d:00:fc:7e:12:48:c3:43:
         7e:4f:d0:e4:bf:5d:af:23:ab:2c:86:7e:6f:b1:63:bb:3f:b4:
         b0:eb:7b:49:49:9b:e1:bb:10:ef:dc:c6:0a:7d:76:ae:9e:3a:
         d5:a3:46:da:51:45:f0:77:05:1b:d5:e8:7f:15:27:8f:c4:db:
         4b:37:6e:e0:96:5b:a5:13:f3:90:7c:29:d6:67:88:64:88:1b:
         ac:f8:79:0b:89:1a:b3:58:56:17:fa:75:b1:be:f0:18:82:e9:
         03:1d:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----