Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
File:                     Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json)
Hash identifier:          ZPYUH/n/ShxoXmTSGyTdn6pCl2eAQclpTKT0jE321wY=
Subject key identifier:   C7:E7:E1:A4:42:FF:E2:61:0E:0C:A4:E9:83:F1:8F:14:10:93:26:FF
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       01962E2ABFDB61982C1AEB742AF62CDE8C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
Manifest number:          10BE
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=)
                          2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=)
                          3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=)
                          4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=)
                          5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=)
                          6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: lhJTUCYUvAoOFvZeJQQzpSSKJjb7wZ+ky6G4CA+n84Q=)
                          7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=)
                          8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=)
                          9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=)
                          10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=)
                          11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:db:61:98:2c:1a:eb:74:2a:f6:2c:de:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=c7e7e1a442ffe2610e0ca4e983f18f14109326ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:a0:19:d9:90:c6:25:45:6a:df:71:b0:70:
                    1b:4a:d7:d3:26:20:f7:72:4c:38:d8:65:85:cb:b0:
                    31:58:3f:62:dd:28:8b:0b:38:22:b1:47:41:ab:ee:
                    fd:2d:73:87:14:7b:cf:5a:14:4c:3f:46:35:c8:8e:
                    68:50:23:5a:8b:3b:67:6e:46:14:b9:90:4f:70:84:
                    ec:2d:ab:54:ad:08:26:93:94:c5:e5:32:7c:d7:cf:
                    11:a5:bc:8f:dd:c2:b9:cd:fb:4a:61:04:b3:63:ee:
                    60:4c:97:3e:a2:9f:72:3b:e4:48:71:bc:47:b4:a2:
                    43:61:01:4e:4d:77:80:02:ac:98:f4:23:cc:64:2b:
                    81:2a:98:06:25:30:e9:b3:8e:63:23:b3:8e:f4:f4:
                    92:6a:5d:48:73:b4:1f:2f:ab:7f:2f:28:8b:9a:24:
                    8b:ee:cb:b1:de:9e:72:b6:12:d1:aa:91:39:ad:61:
                    20:12:c6:b8:3e:64:c6:e7:f6:a0:11:ae:11:f0:47:
                    d3:ae:8b:1d:2c:77:cd:63:23:15:4f:a4:c5:bd:a8:
                    b4:8b:a8:a2:47:7f:45:e0:89:e2:ab:b2:2a:bf:18:
                    2d:f9:b3:a7:8c:ec:2c:b6:4e:8d:5f:ce:59:95:08:
                    dd:fb:5a:e0:6f:98:6b:34:0b:67:88:14:21:22:79:
                    59:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E7:E1:A4:42:FF:E2:61:0E:0C:A4:E9:83:F1:8F:14:10:93:26:FF
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:20:90:3a:64:0a:32:e8:e5:6a:a8:8d:f4:cf:83:9c:2f:
         e1:df:67:7f:34:9f:28:1a:75:7f:09:ae:f6:95:7e:de:17:db:
         1a:f0:64:2e:f9:7b:b8:34:79:f3:35:0e:60:f6:df:ac:94:34:
         4e:55:de:3c:f4:6a:52:24:6b:d0:b9:71:5d:a5:63:9c:b1:64:
         8a:67:30:5c:e5:fb:39:9a:38:0b:d5:e8:f1:15:68:12:56:f6:
         7e:07:06:d2:20:05:7d:3b:0b:19:1f:42:ec:4a:84:52:a1:e2:
         26:f7:66:a5:13:33:c2:8f:bf:12:77:49:7b:39:dd:41:dc:bd:
         2c:ee:87:85:82:ef:a9:cb:20:31:72:56:1b:4a:59:3c:46:9e:
         08:eb:0b:13:0d:bd:8f:59:2b:aa:1e:70:0e:3f:cc:51:ce:39:
         45:fe:56:55:15:88:bf:03:8c:df:3d:b7:15:b8:da:cf:13:12:
         f6:12:92:cb:2a:d4:92:57:8e:28:bd:f8:f8:21:3e:44:f4:cb:
         bf:0d:2b:bb:0c:5e:c1:1e:33:f7:ad:f5:98:e1:c6:a0:39:8a:
         d6:57:62:a0:75:89:cc:76:4b:37:5c:d6:de:70:61:fb:45:32:
         ac:d2:ee:63:d7:24:b4:c5:97:9a:eb:3c:5b:d6:74:07:c4:73:
         42:5c:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----