Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File:                     mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier:          Vk6SFu8ydY6mnbwXQ8QlemkTdceHRonL68igk5A5vWQ=
Subject key identifier:   6B:BC:50:A5:3D:EC:68:0F:BA:5E:9E:2D:F2:A1:8F:7F:F1:25:C7:EC
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer:       /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial:       01962E61C8E779505DA1632552BB67371519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number:          11E7
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
                          2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
                          3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
                          4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
                          5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: Q9IE0GE+Ssk0Tht1qHh5BrwF+WCu2NbklYB4scV3wz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c8:e7:79:50:5d:a1:63:25:52:bb:67:37:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=6bbc50a53dec680fba5e9e2df2a18f7ff125c7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:0c:3b:45:e2:67:ac:70:22:2a:d9:8b:e2:
                    b9:54:cb:92:11:38:7f:a8:4d:a9:20:a9:06:18:24:
                    0a:2b:fe:d0:8d:be:7d:7f:d3:a7:80:0a:6d:ed:72:
                    97:fc:7d:2d:8d:16:fd:40:56:fb:3c:6e:93:af:7e:
                    3e:7f:68:5c:2c:f4:61:f8:5a:22:61:97:1e:fd:b4:
                    22:17:8f:50:8b:f3:48:1b:3c:61:6a:59:c4:9c:cf:
                    00:d2:02:38:d3:16:b8:7f:ce:11:14:cf:d4:b5:9f:
                    a3:cf:00:a9:bb:cd:ea:26:33:1c:04:49:6c:5b:d5:
                    3b:16:45:12:50:ba:46:99:58:1a:81:ec:c7:af:19:
                    ee:20:17:2c:3c:b6:86:ae:ae:01:2c:c8:6f:b1:33:
                    dc:49:c6:2d:4c:82:9d:f5:a5:48:7d:87:77:35:ab:
                    49:ad:15:79:24:ef:8f:c0:5b:3b:b0:ae:04:1b:ce:
                    57:92:cf:d9:ca:7c:38:d8:c8:5a:ae:92:01:07:ab:
                    1d:34:5b:fc:3b:88:db:eb:c6:05:42:cc:d9:b0:37:
                    cf:4d:34:29:f1:8e:70:37:e2:4f:7d:0d:70:e7:07:
                    cb:5e:ac:40:30:38:ef:fd:a4:7d:c4:20:49:39:a3:
                    75:f5:96:d4:6b:e1:b5:e4:6d:cc:4e:ce:e1:17:96:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:50:A5:3D:EC:68:0F:BA:5E:9E:2D:F2:A1:8F:7F:F1:25:C7:EC
            X509v3 Authority Key Identifier:
                keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:a3:19:bb:ad:fb:c6:cf:f8:63:05:47:74:b2:c1:38:26:
         1a:3d:50:d5:84:05:b0:4a:7f:15:c7:43:84:ed:52:61:2e:b3:
         83:be:e3:5d:03:2c:d0:f7:e8:91:ed:80:64:fc:88:0e:c5:36:
         26:aa:84:d1:6e:c1:1d:da:fd:54:2a:9b:5f:e7:62:70:53:89:
         9d:1f:e5:10:a8:09:12:e6:21:f3:d3:85:da:1b:c4:74:98:94:
         f4:1d:91:76:8a:1a:45:d1:79:9f:de:ed:a1:01:5a:66:e2:c2:
         90:6c:a3:83:2e:aa:b3:da:fa:34:0f:9d:ad:45:37:ef:8d:cc:
         26:0e:9e:d5:4f:4e:09:60:e6:7c:00:6e:17:20:c6:61:8c:95:
         0b:8a:43:22:ae:22:d9:b1:8e:08:bc:89:6e:2a:58:f4:69:ae:
         63:3d:3f:de:9f:83:07:3d:0e:30:c0:25:99:9d:8d:a3:e0:9b:
         26:ca:30:79:a0:4d:4f:62:d2:53:4d:25:03:73:fd:b4:f0:c6:
         a0:4b:5c:0d:dd:97:6b:eb:c4:45:82:a3:8c:21:fd:54:4e:e6:
         42:a1:c3:f3:e0:cc:6a:45:1e:bd:b3:d6:9c:8f:c8:bb:5a:68:
         be:3c:b4:01:c8:dc:b3:7b:82:33:eb:d1:d2:a4:46:3d:c5:78:
         d3:64:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----