Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File:                     1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier:          gP6bC4G1qNg5SMmTbpKRlUXJdIWu9uOcoBC9baAZEZs=
Subject key identifier:   77:5C:0E:26:52:2D:F6:03:1B:B5:76:A5:0F:BF:73:E6:AB:87:FD:41
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       01962ECFDDF6C50506A00C4A411DF00FB21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number:          0A47
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: KVrjapnaK4GwdIlpXb5XVVpYwLjdTk+f8dGtdMXr64k=)
                          2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
                          3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dd:f6:c5:05:06:a0:0c:4a:41:1d:f0:0f:b2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=775c0e26522df6031bb576a50fbf73e6ab87fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:54:67:ad:8a:aa:00:2a:90:4c:f4:06:c7:
                    38:b5:26:f6:90:17:6f:a2:38:2c:20:ef:c7:9d:e1:
                    41:04:67:bf:15:72:13:82:9c:c7:c8:30:a3:3a:d4:
                    fc:24:22:c2:78:b4:02:c5:c9:34:19:a6:b7:50:8c:
                    01:a0:32:4f:00:36:1b:28:02:87:d4:d7:11:25:fe:
                    86:57:c9:1e:09:7a:d6:26:48:55:e4:4b:a4:91:ca:
                    61:60:1a:a7:f0:76:9a:b7:2d:ea:7b:db:ab:3d:6c:
                    30:11:61:d2:99:ea:9d:f5:80:d1:6d:5e:0f:56:c3:
                    0e:26:ed:bb:88:55:63:33:1e:43:be:b7:cc:6a:a8:
                    99:ac:ba:63:09:80:0f:8e:d0:01:d7:e9:fa:0d:8c:
                    46:ba:46:85:e7:10:32:4f:1c:bf:5b:7e:fa:35:db:
                    cc:f1:5a:d5:62:9a:a8:bb:82:3a:90:19:76:c9:d9:
                    52:09:cb:d4:24:c3:d5:77:f5:b8:f7:95:f8:14:a0:
                    71:de:2c:9a:35:0d:4a:97:b2:b4:50:0a:de:ca:00:
                    d1:51:45:79:5c:5e:d1:c3:61:77:52:3c:9c:90:e6:
                    32:91:bb:70:a5:cc:8a:2f:44:2f:4a:7e:01:29:92:
                    92:11:08:1e:18:4f:eb:61:3b:b4:58:7d:6c:95:64:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5C:0E:26:52:2D:F6:03:1B:B5:76:A5:0F:BF:73:E6:AB:87:FD:41
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fe:46:c6:cd:00:61:ac:7d:48:bd:33:9b:39:dd:17:f9:91:
         df:db:45:24:22:96:02:3d:74:55:2f:bf:e9:ac:bb:99:a5:7a:
         89:7b:52:ea:68:2d:4e:08:02:b7:c1:84:5b:73:61:fe:84:55:
         02:b5:7c:b1:0c:e2:90:be:c6:b6:92:51:bb:45:1c:fd:2d:13:
         5c:fa:d4:cb:fb:db:da:ad:47:9b:f5:dc:8c:ef:61:49:45:43:
         60:ab:29:64:5b:8f:26:72:9f:e7:b1:bb:bc:41:a0:70:59:fb:
         7d:49:a6:10:44:19:be:96:35:f4:b4:d3:70:be:a5:a1:49:16:
         3d:58:91:8f:b5:dc:09:bb:13:80:42:4e:b2:79:30:80:a9:0f:
         23:ce:20:d1:7d:33:e5:36:f4:85:9b:40:e1:e4:e8:e1:cc:ac:
         10:8b:00:8b:7d:99:65:02:34:14:55:0e:40:ad:69:41:e3:5a:
         db:20:30:d0:2d:6a:3d:e6:e8:63:01:d8:0a:d5:1c:5e:69:d5:
         d2:d2:23:8b:68:07:c7:99:2d:9a:fe:58:bb:9d:50:ae:4a:4f:
         12:87:60:7a:4a:fd:ee:cd:ec:2c:7c:59:79:a1:35:60:f9:7e:
         c6:57:65:3b:0b:97:c7:93:11:00:c0:26:89:9a:cc:84:11:83:
         52:be:31:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----