Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File:                     X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier:          6s8S8fFSJx5DHI8wIMOLbMGV4IgeTAlFq9Bw/xY2y/I=
Subject key identifier:   91:9F:B8:A6:A7:AF:55:74:61:4F:B2:9F:B1:B3:A5:15:09:7C:2B:4B
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer:       /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial:       01962E99AB424E04CE38BE09C27828DAF8C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number:          F1
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
                          2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: u9XPaRel5mr22Zp4Y0Wnrm5XIlqKiBKpXKnqfevTVrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:42:4e:04:ce:38:be:09:c2:78:28:da:f8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=919fb8a6a7af5574614fb29fb1b3a515097c2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:b7:80:29:6f:81:41:41:f3:0d:31:28:aa:
                    82:aa:ea:5f:f2:17:bf:ef:74:ef:44:56:48:e3:31:
                    a7:43:f3:bf:9f:2c:27:41:42:a7:0c:e4:43:82:cf:
                    38:49:94:bc:31:6b:67:41:64:e0:0a:af:52:8f:f4:
                    97:d7:08:7d:e7:dd:33:50:02:b0:26:14:2c:f2:ea:
                    1d:27:19:17:f9:20:9d:f3:6f:9d:6d:05:c3:56:16:
                    22:de:04:e6:75:d3:47:ba:98:bd:af:c8:ed:55:a8:
                    6e:c5:f8:ab:0f:a5:b7:12:04:d5:32:fe:46:0b:b7:
                    17:b8:33:49:e8:fc:e9:1c:79:1c:23:a9:07:d0:d6:
                    24:79:01:f3:31:34:8f:3a:e3:82:d0:f4:2d:11:a2:
                    34:7c:ee:11:35:d4:9f:02:32:47:ec:6e:68:20:f6:
                    52:0a:9d:36:ea:a1:8a:bb:c5:f5:5f:15:3a:dc:e2:
                    ae:ac:d6:80:10:ac:f0:e3:18:c2:5f:50:d4:f4:96:
                    ca:43:a4:99:00:62:b4:43:a4:07:b6:64:02:61:be:
                    8b:2f:0c:de:aa:95:43:9a:2d:b4:02:66:65:39:4e:
                    8e:09:18:33:2a:d4:0b:b8:80:42:b6:48:1f:7a:63:
                    86:99:1f:29:20:c3:75:67:0a:7d:0d:a4:7f:74:65:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9F:B8:A6:A7:AF:55:74:61:4F:B2:9F:B1:B3:A5:15:09:7C:2B:4B
            X509v3 Authority Key Identifier:
                keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:9f:2f:82:fc:dd:b9:6b:6e:a0:56:5f:e2:db:fa:b0:6f:
         90:a1:aa:c6:24:99:8f:b8:3c:db:2d:df:5e:a1:dd:2b:ec:33:
         9f:9d:9a:ac:3b:56:b4:68:df:cd:24:da:bb:df:a8:63:f2:05:
         b4:56:29:6b:87:6f:4d:d0:69:6b:ff:3f:e2:f6:2b:78:a1:4e:
         51:f1:f8:43:d1:9d:a9:0f:7d:0a:22:e3:89:7d:fe:37:85:3e:
         c2:63:88:78:93:79:a4:a0:c0:e2:7f:ec:c6:9d:9f:a5:f9:8a:
         58:b0:d9:96:7c:21:37:41:9c:e6:a3:09:4f:36:6e:f8:61:07:
         4d:3a:51:15:0b:11:da:3c:e5:0a:88:c9:ab:91:1b:ff:24:98:
         35:e9:65:c2:44:07:16:57:62:d5:3e:05:94:3a:c8:98:bc:00:
         53:81:ec:79:7b:c3:46:fa:6d:e7:35:e8:07:66:6f:7c:08:2b:
         1e:be:e0:54:48:6d:35:96:a9:47:32:d8:a3:d1:3a:27:ea:92:
         6c:77:52:d2:37:dd:09:87:ab:62:e3:15:c3:4c:32:62:f7:1b:
         33:4a:6e:c5:59:4c:ea:6a:38:49:ce:a6:83:df:58:d0:7a:c2:
         20:40:74:03:10:52:b9:69:74:65:c4:fa:01:8a:ee:07:3f:2c:
         1a:b4:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----