Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          Jbmf9ZxNQtBcLrHWJi+YTRClt3BgOnLDc9TR8Y/UjJY=
Subject key identifier:   19:B9:A4:9D:49:11:28:65:83:5D:3C:52:4D:9A:7E:0E:94:AF:14:FC
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       01962FAB7164758B1CC36E4AC04FAF2724ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
                          2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
                          3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: 6KlUWZxTgMVd1XlSGrMrLzxxOTs5mQ65gSmBRF7OJ8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:71:64:75:8b:1c:c3:6e:4a:c0:4f:af:27:24:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=19b9a49d49112865835d3c524d9a7e0e94af14fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:2b:65:53:91:67:b7:f0:30:a3:bd:0f:c5:
                    f0:6f:ec:c7:d1:b7:f4:d8:e3:bf:83:d5:59:4f:35:
                    35:dd:d3:75:c6:6e:eb:de:d4:98:19:5a:fa:cd:31:
                    39:07:a3:03:b4:82:47:5e:d5:5d:09:77:b4:3d:5c:
                    e3:6e:9e:7d:0a:32:2f:86:5a:6d:90:29:ca:18:09:
                    a2:3e:33:20:e6:bb:37:14:df:66:0f:e0:ea:6d:c9:
                    60:a4:93:8c:81:4e:0e:77:0d:bc:30:89:2d:df:8a:
                    9c:a9:13:02:54:36:4d:fd:84:cb:48:25:5c:2e:7d:
                    36:87:67:68:e4:de:ef:8e:12:a1:d6:37:f5:2a:cd:
                    f3:79:32:6b:fb:1e:f6:9b:40:72:0b:7b:39:bd:f7:
                    cf:ab:f3:6c:5a:2b:38:37:22:07:ae:55:42:3d:e4:
                    2d:d4:3a:86:f9:bc:ae:ce:4b:45:c5:ce:2a:58:e8:
                    81:71:1c:d9:c1:36:5c:17:84:0d:74:af:9b:5a:d6:
                    d8:86:af:a2:5a:91:16:de:b6:e0:40:58:76:18:f2:
                    f8:e2:25:26:28:b4:65:b5:5a:51:63:df:8f:96:c8:
                    70:43:ce:ba:e1:6a:3e:66:a8:81:56:dc:20:28:37:
                    5f:7b:0b:1e:3e:1d:b0:75:3f:2b:f5:dc:d9:3b:64:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:A4:9D:49:11:28:65:83:5D:3C:52:4D:9A:7E:0E:94:AF:14:FC
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:e8:72:77:d6:fa:76:5b:58:00:21:ce:cb:e3:a7:7f:64:
         6f:e9:35:a9:f9:d9:27:bd:24:37:77:3a:bf:3b:4f:15:85:4e:
         b6:c2:f7:bd:37:57:19:36:56:cf:05:9c:74:55:04:cb:a5:29:
         1e:8f:2f:ea:10:d9:79:5c:6c:8a:7c:fa:3b:fd:ca:0e:97:9a:
         6c:af:9d:27:10:c7:06:26:c2:c7:ee:01:c6:0d:36:e0:50:84:
         04:7d:61:c8:17:ae:c4:7b:16:d6:db:a8:b0:88:15:9b:00:3a:
         2c:33:b9:6c:da:4f:5a:f7:0f:6f:f1:ec:91:b7:a3:64:8b:61:
         2e:5c:38:1e:2b:b1:75:4c:47:30:0a:d2:ce:96:0e:5f:23:07:
         45:01:4c:b2:d1:21:c3:c5:85:b2:33:48:d8:c9:cc:d0:ae:bb:
         32:10:92:31:4a:ff:4a:70:b1:a0:ba:af:a9:29:17:78:5f:6b:
         62:a5:85:ba:0e:4d:c4:53:15:7d:33:2e:98:13:06:72:df:f4:
         1e:a6:3f:b4:a7:41:93:8e:64:f1:7f:ed:16:e4:6e:ad:1e:ed:
         95:71:ce:9c:49:aa:12:8a:ac:b0:7b:26:c9:80:7e:a9:42:b7:
         02:02:57:6e:54:05:c8:4e:8b:44:b1:7a:23:ed:8a:0e:7e:4e:
         7e:17:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----