Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          5TE1SQywfzEuPDt6OdW/CmI6vLOZ4jVpHu5aKtSnFDE=
Subject key identifier:   49:80:58:C9:05:F0:FB:C2:A5:1E:F8:AA:18:31:B6:9C:84:2E:2C:8E
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       01962E6191B64C5EBEBFB6536982F758DAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: a5QV+5Dd1o8u17kQr4blFAgakRBJCeH9KLM2SptY3ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:b6:4c:5e:be:bf:b6:53:69:82:f7:58:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=498058c905f0fbc2a51ef8aa1831b69c842e2c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:85:ac:88:34:cd:0d:46:6b:dd:2c:d5:bf:
                    98:40:32:f5:85:9b:fd:d5:2f:7c:f7:35:f2:e2:69:
                    74:00:82:69:95:69:16:cb:fd:ae:66:c3:95:cb:c3:
                    37:22:e2:f6:1d:3c:c3:e9:95:bd:e3:b9:78:c8:7b:
                    6a:be:e5:dc:85:c9:81:fa:a7:15:7e:42:3b:02:7c:
                    a1:9e:15:73:d5:64:62:38:33:08:ff:25:b6:80:23:
                    53:f8:ef:12:29:8a:ad:e8:5c:36:56:0d:1e:69:49:
                    5f:b2:9a:82:45:2f:32:b3:fb:e2:cf:59:56:20:2b:
                    77:80:3b:31:3f:22:ee:59:c2:61:e6:73:99:0c:4f:
                    a5:a4:87:ee:c0:f4:e6:27:53:3d:7a:93:73:df:d6:
                    19:1e:91:83:83:5e:ad:6f:d1:c7:db:bd:76:9c:e6:
                    59:ed:9a:fa:96:52:40:e7:ec:1f:3c:20:06:c2:bc:
                    44:57:b8:1f:31:be:24:d0:84:21:47:6a:df:27:83:
                    b3:52:ae:04:2a:d4:3d:9c:24:2d:6a:f2:5a:e5:7e:
                    ea:49:1c:5e:64:32:1a:4f:8a:64:60:2a:e9:04:00:
                    2f:bb:24:b0:72:f4:86:40:3c:5a:7d:09:45:e1:bf:
                    b9:39:d2:a4:b5:78:27:10:cc:db:4e:01:21:ed:92:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:80:58:C9:05:F0:FB:C2:A5:1E:F8:AA:18:31:B6:9C:84:2E:2C:8E
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:46:ee:af:e3:ec:82:a1:f6:1b:9d:a2:04:a0:1c:99:e1:08:
         9b:0f:9c:8f:79:ce:74:df:66:51:f6:e2:36:de:72:d4:73:ec:
         d3:25:6c:0c:8b:87:08:f0:33:d4:ec:54:b2:2c:ff:90:fd:00:
         38:7d:ef:bd:66:9c:8c:51:2c:ed:2e:9a:db:5c:ba:9d:d4:46:
         8d:3e:54:4f:65:38:e2:02:f9:64:7a:b3:d3:0b:c3:d7:22:7e:
         d7:d4:2c:b7:1a:0e:5c:32:35:a1:2b:7f:31:02:ee:07:30:90:
         4f:02:39:63:73:aa:ca:63:66:7d:f2:58:fc:48:fc:d9:7f:5f:
         87:e6:e7:09:79:e6:24:99:0f:06:35:4e:c5:ff:6a:ec:b9:e7:
         c0:e6:7b:ab:f5:b8:28:f7:ca:ca:c4:c9:6d:b2:61:9f:ad:9e:
         39:e5:17:fc:9b:b3:8d:2f:45:ed:a8:8f:4d:16:e4:1c:da:91:
         d7:ec:b7:44:00:bb:dc:8d:bc:33:27:ff:b6:53:98:db:2c:71:
         d0:e8:aa:44:75:03:dc:70:c2:4e:67:68:35:23:10:4b:4a:28:
         74:b9:ec:3a:fd:2f:37:84:69:8c:dd:eb:28:9a:c3:c6:56:b3:
         e4:80:4e:d8:c3:d0:86:9a:f9:56:f5:ab:cf:b0:a6:d4:0d:31:
         49:7c:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----