Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
File:                     fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft (raw, json)
Hash identifier:          CcVRG7VYBt6deOki/S5OiSmDGlrer40AV6wEPtlc1is=
Subject key identifier:   3A:DD:38:B3:59:A2:55:41:6E:B8:65:06:78:B7:4D:A0:3F:90:5D:FC
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01962F3D631F17FABB260E971A28A7AAC3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
Manifest number:          14CE
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 2WtoHZvg5te_N4m2YVTI34CdoYk.roa (hash: po1CAhe738W8G3Ru+HFg6o15PnibllxC1AqpMi8ycAQ=)
                          2: BeUnSf_adtXh-VhkfDRE394-45E.roa (hash: CdlVH/YFG+Vq/xiitJdeNkAtG1jQLI1t5iM8bMrVFIY=)
                          3: KzF73ZDClLIDJNEss_LTct-OfM8.roa (hash: wwo2QpmL0Z2erUnFb3zClo3RLAqbKfXbEV8WvH+eqCo=)
                          4: Rl4DyVo-dxDb_n40cHhpD-Gbhew.roa (hash: Po08T18Bp9CxsHnf5hIBOm50bD50mTub5HC9lWw3eeM=)
                          5: eUQcbwOFDSyUWbBYdK5ofzH2W6w.roa (hash: 3zEC5/G66rhzWqxp/UdsXLCo2lhiAFcLot7AWEwlIW4=)
                          6: fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl (hash: A04dPvWAaqOkhz+GiExe2ApYEuiOau74IpqtsVN16G4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:63:1f:17:fa:bb:26:0e:97:1a:28:a7:aa:c3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=3add38b359a255416eb8650678b74da03f905dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:dd:a9:7d:00:fb:94:20:51:b1:75:56:3c:
                    9f:90:5d:8b:0a:f0:5c:9f:04:fb:12:9c:95:b3:21:
                    ec:c0:c0:6b:77:fd:24:f1:bd:a4:57:94:e3:14:a5:
                    47:34:41:df:b4:65:e6:a7:ed:cd:74:5c:68:32:5f:
                    05:43:4e:13:5e:fc:f5:5b:89:8f:95:d1:37:93:06:
                    79:26:7c:8e:b2:1b:04:f8:f4:21:b0:48:dc:f0:8c:
                    2b:40:56:57:0f:0c:d5:e2:e7:21:51:65:eb:8c:c3:
                    cd:86:b4:89:3c:99:c6:8d:a1:a2:e6:e6:2d:11:fc:
                    ca:f6:6a:23:fc:68:18:1e:5c:15:7b:04:ba:27:01:
                    37:5f:75:c8:de:5a:b5:61:ff:6f:4a:00:02:0f:cb:
                    3e:c0:40:f1:bd:8d:7e:9c:80:19:92:17:13:9e:ab:
                    ef:41:1e:c8:b8:61:85:21:a9:c5:47:0c:c2:ab:17:
                    5a:f8:9e:fb:93:87:9b:c7:65:8c:ee:6d:55:40:b1:
                    e3:97:99:99:5b:9e:96:2e:e5:44:8a:f5:e2:ae:be:
                    f8:7c:41:87:3c:f8:92:0a:f4:77:68:2a:5f:12:28:
                    3c:a0:33:64:7c:96:95:0f:59:a6:d9:8f:10:3e:09:
                    d9:c8:67:23:76:c9:f1:03:8f:86:e0:b9:5f:fe:8e:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:38:B3:59:A2:55:41:6E:B8:65:06:78:B7:4D:A0:3F:90:5D:FC
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:89:50:7d:74:38:16:d4:0a:46:72:97:ff:4c:ae:fd:23:
         aa:17:1d:08:ee:06:32:c6:0d:b3:46:0b:8d:6b:68:d0:c6:00:
         1f:92:90:81:72:a0:f5:d5:18:2c:76:ed:aa:5e:a3:2b:25:bc:
         ae:e7:26:8e:22:08:6e:f7:cd:2e:d4:44:b8:4a:52:f5:38:3f:
         aa:0e:cf:bb:05:9b:86:5c:13:99:ee:5f:2a:33:2c:a3:c7:29:
         ff:95:2e:b1:82:1d:4a:1d:11:8a:e8:23:1d:9e:35:f2:f4:14:
         eb:68:ec:de:00:8c:6a:d7:65:63:aa:f2:2e:bc:00:09:17:af:
         7e:5f:f6:a9:b6:69:c6:28:d8:18:54:c7:50:61:39:1e:a1:0f:
         16:ce:b9:91:bd:fc:62:9a:f1:59:1b:8e:6e:3b:31:36:0a:e6:
         79:da:09:9d:0f:10:3a:2e:61:3e:91:cd:bc:56:af:e2:39:36:
         f9:f8:98:44:e8:53:50:d4:3a:58:b3:cc:95:0c:e1:46:f6:98:
         27:65:a8:97:ea:05:25:ca:04:47:cc:7b:a4:c0:a8:dd:39:78:
         05:bc:76:e2:6f:55:4c:56:56:bf:c6:80:7b:21:35:a8:cf:fb:
         25:21:f6:c8:e4:bd:79:7c:15:c0:2c:6d:10:83:cf:95:44:21:
         6a:3f:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----