Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File:                     5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier:          G3T+esXBpirnbvhpEAwVzS9lD46EKkszVmiQOAiA4AA=
Subject key identifier:   29:43:35:00:6A:72:51:33:9C:39:9B:2E:75:A1:AA:00:F4:9D:D2:ED
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer:       /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial:       01962DF3DBA403AB0C5623534F87CAD67B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: /R0Pn9YsjL0F/4CHt64NrLyg6WbAJm+sLWo0h7GzNAM=)
                          2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
                          3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:db:a4:03:ab:0c:56:23:53:4f:87:ca:d6:7b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=294335006a7251339c399b2e75a1aa00f49dd2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:4e:e4:e4:46:02:04:97:76:c2:2c:05:de:
                    34:8f:e1:63:75:09:bd:40:e2:b2:a4:f5:91:aa:09:
                    24:52:c8:81:e5:e9:18:65:a5:43:25:0f:d6:05:cd:
                    f7:e4:45:12:96:0b:d8:4a:d2:f9:87:45:4f:29:1c:
                    32:87:e6:05:37:58:1d:0a:2f:cd:a2:4e:85:11:0a:
                    2a:bd:25:b2:f8:1a:8a:2a:a6:4e:55:ac:79:a0:f4:
                    85:72:e3:72:7a:3d:71:18:d9:95:f6:95:ed:0c:df:
                    b9:d2:0c:0c:a0:bc:c2:cd:92:7a:a5:26:4a:ed:52:
                    05:f9:17:1e:99:a9:a4:01:f2:62:cb:43:2c:80:72:
                    92:5a:cd:f5:0d:34:a6:d5:33:d6:97:55:03:75:e0:
                    fa:87:fd:2f:30:68:91:c2:cb:9c:0e:76:6e:db:c0:
                    8b:8c:94:8c:a3:eb:d5:90:f4:c2:01:fd:79:ea:a6:
                    8a:36:ae:c5:0a:19:8f:ee:45:9d:e2:b1:a6:32:41:
                    9b:02:36:bb:3f:7c:c5:05:ea:f2:05:ee:44:69:3d:
                    92:39:4d:60:d1:a4:85:f7:71:48:2b:a7:02:ab:23:
                    9d:25:88:74:73:86:8f:e4:ed:1d:68:23:6f:01:da:
                    63:cd:ab:40:38:7d:fc:6d:ed:83:a0:87:7f:83:db:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:43:35:00:6A:72:51:33:9C:39:9B:2E:75:A1:AA:00:F4:9D:D2:ED
            X509v3 Authority Key Identifier:
                keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:0f:20:51:f5:6d:13:a0:e1:c6:bc:2a:26:2c:6e:0e:91:
         2f:3a:bf:87:6b:cb:ae:4d:9c:3d:21:18:c6:32:54:04:fa:6a:
         f7:2f:aa:6c:2e:38:32:66:94:44:0c:fe:04:11:5e:87:8e:47:
         83:75:cb:0e:b3:fc:e3:a8:15:a8:90:4a:35:ed:ee:41:4e:e4:
         c8:97:a7:75:05:1f:55:d6:ee:ff:6c:78:c0:1d:db:68:83:c4:
         54:9f:4e:8a:e5:2d:15:b6:e2:2c:c8:3c:90:81:8f:75:87:88:
         bd:4f:68:4e:04:f8:89:7b:38:43:80:d0:64:9c:05:c6:e7:ee:
         cb:7e:73:99:40:01:01:d2:19:03:d9:a0:05:bc:0a:0c:5d:69:
         eb:96:97:20:c0:ff:9d:30:a3:74:50:5c:5f:a6:99:c7:0f:fc:
         de:41:c6:6a:a2:e3:0a:4c:e3:4e:43:90:bc:01:9d:0a:07:ab:
         dd:34:d0:b9:3a:73:d5:04:49:45:22:83:cd:6d:2d:02:af:98:
         83:1c:83:f7:14:24:ee:80:3a:40:38:66:0a:02:26:b1:ef:0a:
         29:9d:25:b4:fc:2b:25:e5:4b:8c:be:69:bc:dd:47:1c:19:5b:
         78:ff:36:6c:98:f8:42:03:f1:f5:7e:52:7b:ae:86:4f:6d:7c:
         78:81:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----