Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File:                     U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier:          tdExuIwLCs0JEVv5ogLuHsS073GeDo/kx/JFWYZL/Qg=
Subject key identifier:   43:65:46:BD:25:FC:EA:F5:1C:44:4A:BA:F0:9C:F9:50:D9:96:3B:3F
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer:       /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial:       01962F3D77281DC9E7CF8CDBBBD5E7CF7A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: Y25PPhuXYdKJs+8cnuRImpooru8SJ0U2TiO/Fv6oDWs=)
                          2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:28:1d:c9:e7:cf:8c:db:bb:d5:e7:cf:7a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53937087814b435825470069db9e723dbe728f3b
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=436546bd25fceaf51c444abaf09cf950d9963b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:c3:e8:52:44:9e:ce:dd:7e:60:d4:f2:60:
                    38:92:d2:f0:6a:4d:3f:34:6b:71:72:6e:01:2f:1d:
                    fe:a8:05:9e:7f:89:45:4d:6d:20:fe:9f:08:27:e1:
                    72:e6:90:d6:60:34:63:a0:f6:6b:07:49:40:bb:6d:
                    85:08:6f:81:b6:27:8d:16:a3:a3:4e:c3:b4:27:e6:
                    d4:d6:e1:03:12:22:d4:0c:d2:ff:67:2c:bf:a4:a1:
                    02:48:a7:35:0c:e3:54:ed:c2:09:51:1a:b6:37:9b:
                    01:0d:c7:7e:36:a4:12:3d:45:c3:82:64:6d:df:6f:
                    b8:fd:c7:88:e7:b1:8e:3c:93:3d:90:08:ab:03:6e:
                    99:4c:a3:df:8a:ff:ab:9e:22:57:fa:31:b1:44:ae:
                    d1:9e:81:81:51:e2:a8:7d:e4:a9:13:1a:8e:c7:8a:
                    9a:6f:c8:d0:57:ba:a8:35:3b:2f:29:ad:52:4d:9c:
                    4e:0d:17:25:43:ab:87:e9:fd:99:6b:57:00:dd:48:
                    b8:15:89:fc:ab:86:34:fd:42:c2:4f:3b:0f:17:ea:
                    b3:7d:19:4a:50:b7:03:78:0d:36:54:f3:12:c4:50:
                    d5:6e:a0:73:08:9f:5a:fa:20:06:db:fe:91:0e:e4:
                    ba:77:a4:c1:d5:ef:9d:2a:c7:ce:40:12:56:32:6b:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:65:46:BD:25:FC:EA:F5:1C:44:4A:BA:F0:9C:F9:50:D9:96:3B:3F
            X509v3 Authority Key Identifier:
                keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:dd:3d:b4:4e:0f:6d:30:51:3c:af:27:51:a0:c1:57:b8:15:
         51:49:b8:87:36:54:0a:c3:d0:cf:08:b2:5e:b7:e4:29:96:7e:
         89:48:47:5e:90:3a:39:c1:8b:d0:c0:0d:0a:7d:28:91:80:a0:
         29:49:45:b5:18:f6:fd:45:d7:b3:f5:c4:d8:65:c1:ab:71:91:
         6b:d1:36:75:54:e6:45:03:8c:26:56:e4:4d:22:b6:94:91:f3:
         2d:d7:f1:41:44:0f:50:de:03:7c:1f:5e:1d:a0:d9:37:88:d5:
         53:10:82:b1:33:fc:b3:bc:48:09:26:1f:e7:dd:cb:c4:5d:a1:
         25:e3:50:93:06:ef:66:28:f2:dc:f0:73:79:38:74:b9:20:68:
         b1:c3:08:40:b8:25:f1:ae:d8:31:06:54:89:a2:4f:95:e2:d9:
         42:ff:cc:0d:b8:bc:29:9e:ef:a9:77:0f:8a:03:25:c9:b5:69:
         be:ac:0d:02:75:85:5c:3a:8b:9f:86:d4:d7:66:a8:cc:ed:06:
         5b:38:f8:16:01:a4:a4:c6:3e:81:1d:37:21:eb:94:0e:fb:84:
         f3:45:91:d1:77:1b:1b:12:0e:87:42:b4:e9:86:a8:cd:bf:cd:
         91:ca:01:17:bc:9f:34:f8:59:89:06:57:18:ea:4d:11:9b:ff:
         1e:f9:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----