Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          gf140Rg8aIFE2ZEgcxvdu/4RD6KbO+8BX3LTRwWUvGM=
Subject key identifier:   5B:44:DB:76:9E:B5:CC:98:2A:87:15:7B:5D:B5:DE:EE:2A:27:C7:87
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       01962F3D6E43913DE45A4DD95384DA92E089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: 03T6Ckg3bpc-p5cm7cOlm-zySj4.roa (hash: GaU7qAyWTpaD6XW2vb7eV2GbZlXe5YPckflNVF6042I=)
                          2: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=)
                          3: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: +sLMGYUMJ1ZRAT2oWdgGyPPCTYZermuR3qF01BOQKi0=)
                          4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=)
                          5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=)
                          6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=)
                          7: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=)
                          8: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=)
                          9: d1deXM4xRbSP2UhrLzN0Mx2NRgs.roa (hash: qhm+RjDaElbxGpexTe1+uIgmaSf6XCswUmT9fyMU4Nw=)
                          10: p3CfwknfntcJcKeXNwkBmQDTjRo.roa (hash: HQKyD96aQw0B1cae393pm4KC6jsUYb1IgbC2E55egQc=)
                          11: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=)
                          12: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=)
                          13: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=)
                          14: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=)
                          15: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=)
                          16: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6e:43:91:3d:e4:5a:4d:d9:53:84:da:92:e0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=5b44db769eb5cc982a87157b5db5deee2a27c787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:45:0c:aa:65:97:5f:43:ca:f5:60:c6:e1:
                    42:de:76:2d:0a:51:35:8b:4f:98:7b:6c:70:ec:48:
                    88:1e:d7:ad:30:7c:82:7f:f4:02:13:d2:a6:3c:83:
                    fb:4d:e5:0e:f4:2e:e2:89:41:01:7d:4a:cb:81:67:
                    c1:68:17:2d:0f:34:57:36:3b:a4:5b:11:34:25:e1:
                    0b:42:73:a1:7d:0d:80:cc:88:2c:d6:2b:b2:f0:0a:
                    3d:1c:28:22:8d:0b:39:ad:8f:32:fb:3b:34:74:87:
                    55:77:ce:ac:10:32:f9:78:1b:5f:a4:88:a6:d9:b8:
                    8a:ee:e1:f9:1c:a8:b8:a0:df:86:dc:6d:a9:36:e6:
                    6c:1d:8b:32:3e:b3:08:06:d7:1c:ec:bf:98:53:94:
                    db:5c:7f:a6:28:fd:5f:af:51:20:52:c8:93:8b:cc:
                    19:13:30:89:05:f4:02:d3:1a:b7:7c:06:4d:17:96:
                    6e:8a:02:4b:34:a2:72:5d:a0:d9:84:f1:20:84:05:
                    8e:eb:c6:97:4d:17:51:75:60:e2:b6:be:2d:2e:d5:
                    1e:8a:7a:ce:78:db:30:be:93:0a:ac:31:38:ac:ed:
                    3a:b9:88:49:30:f8:a1:4f:7f:5b:b5:3b:ac:d1:a2:
                    42:77:ea:c0:0d:84:12:f5:d7:8c:e7:b7:0e:44:0f:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:DB:76:9E:B5:CC:98:2A:87:15:7B:5D:B5:DE:EE:2A:27:C7:87
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:6e:33:b6:47:63:ff:76:fe:2c:b8:b3:b3:dc:f9:f7:9a:
         8a:4e:4a:bf:bc:28:17:39:4d:85:78:00:3d:88:e4:fb:4e:e6:
         34:52:80:2e:a9:98:9f:69:ec:38:ff:59:73:c4:75:2a:2e:8c:
         e1:ea:31:60:c4:c9:61:11:ff:f6:88:e2:60:46:32:9c:27:38:
         05:24:a9:c9:f8:32:ee:1e:45:6d:6b:e1:c9:d0:ea:81:fa:3d:
         a6:ec:09:f8:7d:9f:62:64:c0:d8:46:98:82:22:67:4d:02:2e:
         a6:3d:62:67:3e:47:e3:c7:98:03:3d:6a:b2:1a:17:03:f0:fb:
         b4:67:c9:e4:d6:9a:33:ee:ad:21:95:73:73:38:06:c7:b8:cb:
         de:03:ca:b8:e3:54:73:89:e3:33:15:26:65:5b:5e:17:85:93:
         bd:ae:10:f9:81:fa:04:7a:23:37:8d:ba:27:7b:9a:66:02:fc:
         f7:37:a5:48:87:44:db:40:5c:14:ea:b7:90:c5:56:ec:f6:bc:
         76:ee:02:4a:16:c1:58:e5:cc:58:09:00:0c:a2:1f:50:9b:41:
         c1:1d:2c:0e:ca:80:f3:1c:0e:0d:83:5d:22:8d:3e:aa:67:68:
         37:40:cd:95:d1:ca:5a:b7:07:0d:fc:47:05:4b:0e:cb:1d:67:
         9b:60:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----