Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          FQ9l0+GQijAsSz+m4GGoTVpbJPfSMY1lGSPF0Rte/+4=
Subject key identifier:   DC:B1:28:6B:16:24:F4:BC:B3:72:E6:5B:78:AF:15:85:DE:47:F0:39
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       01962E2AD24D4F16F2C72098D46BD62C356A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          150A
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 7qMTrTDYcM2QQ56z85li1ofUyTg.roa (hash: iciXORWa6L+wLcQTsMjP02+eKm3TxOImN9wRNpvtLI0=)
                          2: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (hash: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=)
                          3: Joob3jfl7gNNspMnty4voVZknJE.roa (hash: 1hIqcv8nluKZbBgzBR7FmiMq6eAYZfjLrWV7iNAQR8Q=)
                          4: STf9L7OysAzVA3auf6efELGrMic.roa (hash: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=)
                          5: V5Ea_MOjcLpHVqvLmTw95SkN7Ks.roa (hash: 63GkAbV3jgXFnu6FUA8oBV00tbpo0nbUcnNRMAuPFWE=)
                          6: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: RjivF9BeomSMDdsxmSKLEi4xPPT1Q7Uo/29bH+amD4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:4d:4f:16:f2:c7:20:98:d4:6b:d6:2c:35:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=dcb1286b1624f4bcb372e65b78af1585de47f039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:4c:20:88:60:2c:eb:f9:00:a4:89:cb:5a:
                    c6:00:a4:2d:a3:50:8b:8c:62:50:b3:d6:ca:1d:0c:
                    1e:09:d3:6f:0d:44:37:88:b8:e1:a7:fb:74:f4:54:
                    64:11:47:36:be:3b:24:4a:9f:0d:fb:89:7a:9d:77:
                    84:71:f3:b1:ef:f2:c2:52:a7:0d:fe:fe:5b:e8:6b:
                    ad:5b:e7:26:5e:71:9c:6c:97:a5:b9:2e:50:3d:9e:
                    32:68:5b:0d:af:16:c0:e4:e1:55:4f:1e:f6:1c:7f:
                    7a:c0:26:38:6c:7f:cb:f3:7e:0b:f0:b1:cf:11:c5:
                    3c:a1:2f:68:96:93:73:6d:e5:5c:8b:3d:d8:fa:03:
                    b2:28:13:22:67:b7:89:fc:f6:02:93:66:66:e1:42:
                    de:0a:9a:3a:17:17:b5:e4:89:65:03:b5:d7:f2:c7:
                    2e:3a:ad:6c:81:02:44:24:94:05:c5:4c:30:e9:dc:
                    fc:16:24:68:d2:92:b2:59:bc:78:87:39:63:08:dd:
                    9c:97:07:d3:05:83:e5:da:2d:ed:9a:58:bd:ab:84:
                    ac:03:fc:04:fb:0b:23:d7:f4:13:fa:61:12:35:ea:
                    3b:b8:a1:24:d8:95:39:0c:67:12:c1:61:9d:16:1c:
                    58:4c:e9:38:4c:9f:98:42:5b:1e:75:7d:39:c7:69:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:28:6B:16:24:F4:BC:B3:72:E6:5B:78:AF:15:85:DE:47:F0:39
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:66:08:87:e4:76:5f:c2:4d:e1:12:e8:45:c7:63:a7:2e:85:
         d3:53:dc:c6:f8:0d:5e:0b:c9:0f:09:36:f4:fe:c8:7e:44:78:
         14:33:45:33:a3:0e:5f:99:79:ac:ce:3f:0b:6b:14:61:55:96:
         b2:99:a2:d5:eb:b5:0b:1c:29:50:db:1a:f6:df:8e:59:51:cf:
         86:70:58:b6:7c:86:ca:f5:fb:cb:31:9e:6b:35:d5:cf:f0:34:
         01:91:2a:19:73:3a:6a:a1:73:46:16:86:94:c1:52:77:89:0f:
         f5:b7:6f:fa:95:63:a8:5b:b9:11:fa:98:a7:37:22:29:39:d1:
         7d:4b:5c:a2:39:c4:ab:fa:29:f2:8a:5e:e6:f0:31:33:84:82:
         87:42:ac:6f:92:60:eb:af:2b:f1:96:27:86:8a:28:f9:cc:f6:
         1a:8c:0c:dd:50:9f:be:ce:a7:1d:a2:00:38:42:ff:cb:21:2a:
         12:dd:33:2f:8d:98:9b:4a:a2:69:db:5e:8b:86:54:91:ee:13:
         66:83:f6:93:6f:1b:94:a4:df:9c:fa:74:85:32:70:fd:d6:5f:
         ef:b1:35:b6:7c:1a:a8:5f:e4:6d:5f:d4:64:dc:c1:25:9d:04:
         02:ae:6e:61:d5:9a:70:c7:ba:84:32:35:8d:23:d9:99:43:c4:
         33:3f:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----