Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File:                     S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier:          3OF/2FzmPXykyUY2CkHMIA5nkDq7MMrfDUv1foHTbX4=
Subject key identifier:   F5:BD:83:57:8C:00:63:51:C9:65:38:2E:1A:C4:D4:EF:54:B3:08:F5
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer:       /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial:       01962F065110E005DB86B43AE9B6E6B84B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
                          2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: BDWOxts1844mooUAeE8hAxH7zsmF9l+O3PEBtOd8Bvk=)
                          3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:10:e0:05:db:86:b4:3a:e9:b6:e6:b8:4b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=f5bd83578c006351c965382e1ac4d4ef54b308f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:e7:b0:4a:48:fe:e8:c3:46:b3:f9:88:fe:
                    cf:b4:4a:2d:16:9f:38:63:d6:79:04:e9:a4:9c:99:
                    4a:84:13:43:47:4d:06:97:88:b7:d8:85:3e:e7:7c:
                    68:3d:53:56:75:eb:84:45:7e:53:27:bb:8b:60:0a:
                    e3:4a:28:a8:3f:92:0e:2e:35:9f:77:10:b8:39:1b:
                    bd:d0:58:e8:46:ee:ef:0d:d9:4c:3b:47:33:53:a7:
                    b6:64:da:89:53:79:ee:7a:ec:db:d6:f8:c2:54:5d:
                    ad:b9:b7:51:29:e7:2d:c6:f5:f5:2b:50:ae:08:b8:
                    08:4c:2c:ed:8a:df:e9:db:f2:d1:32:3a:a8:64:a5:
                    70:c4:a3:2f:63:d0:3f:99:d2:ad:2a:84:09:07:79:
                    35:e1:52:69:6c:95:a6:8a:7c:36:60:06:f3:c8:e1:
                    e7:81:ec:e8:e7:f1:96:47:2e:3b:95:ae:f2:d6:da:
                    af:1a:bf:6d:37:99:8f:42:29:52:4d:ab:d4:6b:cb:
                    bb:3d:86:3a:60:5b:fd:78:5d:23:df:2a:bb:75:6b:
                    05:71:3d:0a:6f:85:5c:bd:ce:16:f3:f4:26:9f:7c:
                    db:43:96:84:6e:1f:ee:71:d6:cb:1e:b9:47:dc:da:
                    18:28:a6:38:ef:c1:02:64:60:ff:9e:5a:3a:3a:07:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:83:57:8C:00:63:51:C9:65:38:2E:1A:C4:D4:EF:54:B3:08:F5
            X509v3 Authority Key Identifier:
                keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:79:8b:48:8e:97:fb:52:a3:a2:50:47:12:72:06:e7:4a:d4:
         61:ea:2a:9b:37:c1:b0:31:08:4b:95:0a:05:28:2c:bd:f0:d9:
         9b:32:05:f9:ba:54:15:4f:e4:f4:cd:c0:e3:01:72:a1:68:bd:
         e9:a1:df:92:c4:06:4d:04:3e:19:b6:77:91:9c:f1:f0:4a:f1:
         bd:cb:95:02:a8:ac:36:97:e0:b4:95:7f:b6:f5:e1:2a:29:32:
         f7:ce:3f:dd:6b:96:f2:bb:17:d5:f3:58:cd:c3:54:04:42:25:
         e5:3d:0b:9c:3d:e5:94:54:d1:9d:e8:80:e7:8b:2f:88:da:96:
         cf:fb:c0:54:79:cb:5d:3c:60:3f:8a:06:cb:2d:7a:1c:60:7a:
         f2:a4:0e:a9:85:0b:4f:9e:bc:d2:aa:8a:c6:e6:d3:db:b4:2e:
         1b:dd:85:92:50:c9:db:c9:6a:36:02:ec:42:af:d8:9b:ac:36:
         92:66:d7:51:88:57:fe:d0:76:ad:79:d1:18:20:a3:b4:2e:b3:
         44:53:6a:98:16:a9:a0:93:fe:57:57:11:b1:fa:31:0c:ba:73:
         7c:d7:0c:04:05:46:2c:34:7f:15:ed:3a:8f:2b:5a:6d:76:3b:
         1a:ab:d8:78:55:57:d6:03:18:d7:09:92:9e:8e:b1:99:6d:15:
         d6:64:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----