Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File:                     X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier:          CjyRIIWht1PtNfx1as1gyEPZrZ8MaHLr+0llqcRHdA4=
Subject key identifier:   1B:9A:52:73:1D:1E:EC:1A:DD:76:9D:3A:5D:0D:D0:6A:5A:62:5B:39
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer:       /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial:       01962E98A66F0B24564E7F2AC13B26E5C11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number:          0D86
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
                          2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
                          3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: 2CGySCX6Ra6/FMdFfyIkDwv3PF8A91qk3HKhnI8wqJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:6f:0b:24:56:4e:7f:2a:c1:3b:26:e5:c1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=1b9a52731d1eec1add769d3a5d0dd06a5a625b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:92:42:63:44:b3:ef:44:34:bd:03:66:1c:
                    59:43:8c:d7:6b:81:92:46:6f:d7:76:34:eb:95:40:
                    1b:b0:b2:f0:7e:af:35:1a:25:60:cb:7c:7e:9a:35:
                    a0:cd:f6:df:f7:c8:6e:0d:c4:84:4a:80:66:fa:3f:
                    61:27:90:a0:8f:aa:36:d3:1f:e6:12:0b:61:24:a5:
                    de:6e:28:c7:c0:ec:89:53:cb:f5:4c:e4:a3:81:49:
                    79:af:c8:f2:1b:4f:2a:c0:a4:f2:13:a4:71:01:2e:
                    73:8d:2c:c4:e3:f5:45:ed:f5:90:73:bc:f6:d0:05:
                    05:bf:54:3c:32:f1:6e:e0:89:36:f0:78:64:5a:ca:
                    2e:3e:27:35:13:44:f4:e8:52:d5:45:4f:a1:e9:ed:
                    96:cc:25:fc:54:8e:7f:ca:44:b8:2e:4c:68:b7:c5:
                    f6:5b:08:d6:0e:7b:34:3a:b2:59:6d:1a:80:d9:b2:
                    1a:a0:49:ab:d0:21:26:9e:a9:a1:2c:60:d1:e0:de:
                    6c:3a:79:66:f6:12:56:dd:3c:f7:bd:c9:5f:7b:11:
                    c0:fb:b6:33:88:44:6b:31:2a:5a:0b:2a:67:5c:99:
                    44:42:12:19:14:cf:e1:e1:ff:29:fe:ba:8f:1e:fa:
                    54:a6:0a:0c:de:a6:f2:d1:16:47:d6:f1:aa:d3:9d:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:52:73:1D:1E:EC:1A:DD:76:9D:3A:5D:0D:D0:6A:5A:62:5B:39
            X509v3 Authority Key Identifier:
                keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:60:f2:ea:a7:22:76:76:56:f2:00:b9:2a:64:83:2d:51:
         ef:24:c6:06:63:56:ec:63:e5:3a:f5:4e:96:a8:99:66:7b:f2:
         8a:29:0a:d7:42:93:0f:9a:72:89:9e:37:49:64:84:fc:c8:6a:
         cd:61:d2:23:ed:18:d3:2a:43:f1:be:e8:26:5d:37:39:fd:eb:
         8a:67:60:f1:d1:7f:06:9d:27:47:e4:e4:d1:b1:c5:0e:0e:ba:
         e4:93:fb:3f:ff:72:0b:1c:e6:ff:fc:0e:ee:af:fe:3d:64:0b:
         9b:26:97:13:bd:a0:7f:41:02:b0:e4:00:8f:17:34:93:30:46:
         9a:05:18:01:08:ef:6c:8e:88:da:a3:87:9a:09:ab:f2:ca:b9:
         ef:61:2f:08:85:c0:fb:50:2d:07:15:e6:42:d0:fb:ab:6d:18:
         c6:8a:ff:cb:0f:11:28:6e:77:b7:06:e7:5f:4a:e2:44:49:5e:
         24:9b:e7:0b:aa:09:12:7f:e6:32:fb:36:0e:36:b6:8f:fc:19:
         02:d4:bc:8b:cb:89:e8:c0:37:42:76:8d:46:ff:26:98:f9:31:
         a4:a7:f8:5c:b7:31:d9:1f:73:e8:2e:f8:ad:06:c8:a5:e4:98:
         3c:70:fc:14:59:1c:68:a7:8b:63:71:38:a3:43:8b:6a:0f:2d:
         00:3a:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----