Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File:                     _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier:          VXTbtgsR5tb8S58X9IrxHAwkCtxIDmQi1KiCJuUMflk=
Subject key identifier:   5F:DB:9D:18:4A:68:DB:6F:69:F3:5B:6D:08:18:CC:EB:4D:66:A5:44
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer:       /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial:       01962E2ADFE29B2951797CB1CF44171DF496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
                          2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
                          3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: nOeKD+Q2V7p9bhVom86FCaoVgkMw+HO0zYxvW06i260=)
                          4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:e2:9b:29:51:79:7c:b1:cf:44:17:1d:f4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=5fdb9d184a68db6f69f35b6d0818cceb4d66a544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:55:af:8d:f4:fc:b0:49:73:57:66:5d:61:
                    f3:7d:5c:b9:26:88:1b:1e:4e:cc:45:6a:8c:e8:f1:
                    ac:74:58:5f:d3:08:b4:05:0e:2a:57:15:ee:b0:43:
                    f1:af:9b:2f:fc:e6:25:51:62:a6:34:ff:bb:44:84:
                    9f:e3:e3:ed:84:26:a8:a5:69:e2:6d:59:e1:fc:fa:
                    e5:ca:b2:2f:f2:74:1a:ec:0f:13:b4:66:9f:ee:47:
                    56:cf:a3:63:17:12:7b:41:b3:28:bd:d4:74:cf:a7:
                    a2:0d:dd:77:11:65:76:b8:3d:89:64:f9:d2:6a:90:
                    b9:31:e9:47:9b:f6:cf:46:6d:49:18:aa:af:48:c7:
                    02:14:3d:96:19:c0:fd:3b:26:6f:ee:c4:81:41:56:
                    30:21:88:17:34:54:48:c2:4e:13:d9:ae:d6:ec:30:
                    40:45:ac:b5:b7:a5:de:7c:2d:22:ae:3a:5f:6c:77:
                    2b:e6:0c:e3:cd:91:bf:5d:cb:4a:00:81:11:2b:55:
                    60:77:12:20:c6:0e:9f:4e:bf:db:75:a3:68:f3:21:
                    05:aa:61:a1:be:d3:79:c0:35:2b:de:5d:9b:d4:81:
                    47:b2:06:7a:b9:30:ac:17:a7:d5:ac:3f:19:7a:b1:
                    c7:be:43:8b:ad:a2:b3:f7:f8:4b:aa:95:c7:84:31:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:9D:18:4A:68:DB:6F:69:F3:5B:6D:08:18:CC:EB:4D:66:A5:44
            X509v3 Authority Key Identifier:
                keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:16:b9:fa:0a:c3:39:4c:0a:74:31:00:22:fe:f6:2b:0d:
         64:10:c3:19:05:4b:e4:cb:e6:08:71:f7:18:20:f8:3c:bb:35:
         9a:65:5a:23:c8:1b:d8:34:1a:04:61:29:d3:28:2d:2c:ad:f0:
         f8:1c:12:e9:a3:8f:41:00:60:e3:10:35:4b:b7:1c:fd:20:a5:
         e9:38:1c:51:d7:45:02:5f:0c:94:c9:35:db:f8:91:2d:f7:58:
         27:69:a8:28:4f:f0:f7:ad:1d:ac:c5:09:5d:ae:19:d1:19:6c:
         32:9e:7d:32:1e:50:e6:79:59:c5:eb:ba:34:73:b1:0a:bd:36:
         53:56:ac:8a:8c:85:cb:5d:1d:39:56:c6:21:dc:8b:e4:db:85:
         b1:cc:cf:5f:e5:3f:d3:74:ca:6f:7c:0b:c6:23:73:06:3b:0a:
         5a:0a:bd:0f:ac:a8:c3:ac:60:f4:81:ae:02:db:b8:9f:d2:d2:
         15:e2:a6:b4:6a:7f:f9:b9:8d:8a:60:a5:6e:ac:8f:7d:36:aa:
         91:f3:5b:91:16:2e:c4:72:df:a0:6e:1b:52:9f:e8:ba:cf:7f:
         ce:3a:32:77:e2:2f:ef:30:f8:a5:cc:78:6a:47:cb:fa:3b:75:
         06:01:ff:6e:74:d8:00:71:ba:28:6a:fc:23:e0:9c:c2:f2:ce:
         06:db:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----