Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
File:                     raXVKzyodFRXW2W3IO74GiYqXzo.mft (raw, json)
Hash identifier:          zxcpqWBi1o9iHaHIeDp097bZp/GytJZRbrK3MG9JYFw=
Subject key identifier:   65:AB:14:81:D0:0E:17:19:D7:B0:32:21:EF:C3:01:16:FD:A7:8B:3E
Authority key identifier: AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A
Certificate issuer:       /CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
Certificate serial:       01962F069E5F4D2243D23FA756CD3766DB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft
Manifest number:          0E29
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: YkyLNJe8eg5_ZWWXRqgb1FEedCU.roa (hash: yKbeF3cM/odTGzY3J6HPYew0I5seEJaLqL9iFLq9XbY=)
                          2: raXVKzyodFRXW2W3IO74GiYqXzo.crl (hash: PczMRbS0B/Nvqkq2jyZh4lmff7qn1LB9VQhPAun4DrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:5f:4d:22:43:d2:3f:a7:56:cd:37:66:db:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada5d52b3ca87454575b65b720eef81a262a5f3a
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=65ab1481d00e1719d7b03221efc30116fda78b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:e2:0f:67:f0:cf:a9:81:3e:a6:a5:5f:35:
                    88:4b:9f:e6:22:d4:05:bd:63:c5:5a:b6:19:89:90:
                    bc:0b:5e:5f:b7:db:77:52:1c:df:75:41:62:cb:49:
                    cd:7c:2d:d8:b8:cd:c3:e2:88:99:2d:5d:2b:e3:9f:
                    15:cd:84:f0:9b:97:5e:b8:4a:d1:b3:6e:f0:5c:8c:
                    25:39:d7:2b:13:a9:97:ba:19:e5:dc:8f:89:d0:32:
                    50:fd:e9:5b:84:5f:6e:45:d4:86:7e:de:25:c1:b4:
                    c8:05:3a:50:a8:f7:b8:83:a6:13:0b:b6:43:e9:63:
                    e7:ba:a1:10:8b:ee:5e:4b:d8:f1:7b:f5:00:70:81:
                    b7:7a:d0:68:c3:ca:54:11:13:82:04:04:9e:53:89:
                    d3:2e:b9:92:8a:0d:62:1a:2f:3c:a3:1c:05:fa:24:
                    96:f4:2f:87:32:fc:e0:ee:f4:4b:d6:aa:b0:b6:78:
                    91:4c:1b:ea:5a:38:7d:46:55:02:7e:ac:4b:05:8e:
                    31:ad:e5:4c:a5:9f:33:9d:cd:12:d1:27:33:24:af:
                    ef:aa:cb:4f:71:84:57:cf:2f:c8:0a:ba:16:75:01:
                    f7:4b:1f:f5:ec:a1:ec:b7:90:89:b8:ef:89:06:7a:
                    f4:fe:a9:9b:4e:38:21:e5:64:66:d4:5c:07:08:40:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:14:81:D0:0E:17:19:D7:B0:32:21:EF:C3:01:16:FD:A7:8B:3E
            X509v3 Authority Key Identifier:
                keyid:AD:A5:D5:2B:3C:A8:74:54:57:5B:65:B7:20:EE:F8:1A:26:2A:5F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raXVKzyodFRXW2W3IO74GiYqXzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5d8453-0380-475e-9edc-d18ab4f7f5df/1/raXVKzyodFRXW2W3IO74GiYqXzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:29:46:b0:45:0c:8e:fc:e6:6c:d0:5c:03:0e:97:ad:ae:c5:
         b9:e0:34:23:d3:b8:b6:5e:48:f6:46:5e:a5:a5:d9:7d:2a:f6:
         56:d6:5d:e9:c4:b9:1a:a7:d5:79:65:a2:58:13:c3:39:cd:e9:
         46:f7:20:00:0f:de:46:fc:5d:b3:cf:6f:46:8a:77:82:d4:e5:
         ca:56:01:ec:b6:81:57:23:6d:e6:a5:02:fe:a8:15:05:eb:64:
         79:08:90:7a:34:9d:cb:4e:84:4d:c4:bb:4b:5f:e0:7d:73:a7:
         a2:bc:03:23:96:af:a2:29:f2:05:5f:87:4e:dd:97:0c:6e:55:
         17:d9:43:65:58:56:ec:83:fa:dc:c1:ac:14:57:26:e4:c4:63:
         36:e6:af:13:bd:3c:c8:79:48:9b:24:cb:c4:9f:e0:31:ff:43:
         94:c9:6b:b0:57:ad:fa:f7:5d:2a:a8:cd:b8:32:53:59:ce:4a:
         35:92:2e:f9:b3:2d:72:10:57:5b:98:5b:c1:6e:bb:1a:5a:b3:
         2c:30:2d:8b:51:b3:ec:5b:dc:41:89:a0:34:ed:81:ec:8c:98:
         57:53:45:87:62:30:95:8b:5e:e3:33:fe:82:7f:bc:82:3d:90:
         fc:9c:bc:76:c1:5a:84:25:0f:6a:f3:2a:50:6f:ef:6c:4e:e8:
         b0:b0:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----