Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File:                     xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier:          WumeY5R8XcS3OHVRsuYzb+lIKC8KT7zJXkd9huVL/SA=
Subject key identifier:   1D:87:FC:02:FC:DE:1F:0B:0B:8A:0F:25:83:43:66:B0:9D:1F:D0:CD
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer:       /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial:       01962F74ABF671EF34AED1C6FE067F2ECA4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
                          2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
                          3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: k+/wZsxcFx/xtmY8CdQVv/Xw4oPLnrIiYT3LpfIMADw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:f6:71:ef:34:ae:d1:c6:fe:06:7f:2e:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=1d87fc02fcde1f0b0b8a0f25834366b09d1fd0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:74:0f:34:df:ff:71:cd:20:3c:81:65:16:
                    d7:9b:0a:de:a6:12:84:b6:54:7c:1f:e1:41:e7:c6:
                    f2:df:62:bb:3a:f2:85:88:71:1d:7a:6e:83:e3:1a:
                    49:08:19:50:dc:10:c5:ca:e3:61:7c:23:34:aa:66:
                    0b:96:64:e0:82:eb:65:2f:fc:e4:1a:d0:36:46:82:
                    8b:26:dd:20:1f:a0:23:0c:90:5f:4e:35:47:a0:ea:
                    49:83:48:84:7f:29:6d:ba:d3:28:43:89:d3:8d:34:
                    1a:6d:6c:be:80:38:93:68:27:9a:69:8e:55:60:8a:
                    8e:bd:61:30:78:7a:23:51:f7:f9:1a:58:5e:ce:41:
                    33:95:08:47:3e:f6:f5:60:83:5b:54:64:3b:ba:c2:
                    10:3b:73:c1:7f:cb:40:4a:8c:c2:9f:b5:bd:92:f8:
                    b2:33:a3:ff:5d:a8:2c:5e:a9:12:16:d8:3a:85:2b:
                    c4:d8:93:8a:1c:c8:e9:c3:af:5e:c7:2f:fd:ce:0e:
                    c4:70:54:17:fd:0a:a9:67:6b:39:ba:9f:54:35:e6:
                    4f:a3:99:15:95:42:80:60:ca:3c:5a:eb:15:69:a1:
                    b7:f6:34:7b:75:45:e9:98:27:d5:db:82:8a:68:c8:
                    f7:b8:85:00:1f:ef:cc:31:38:5c:6a:d1:2b:11:a7:
                    4d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:FC:02:FC:DE:1F:0B:0B:8A:0F:25:83:43:66:B0:9D:1F:D0:CD
            X509v3 Authority Key Identifier:
                keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:fb:31:ce:16:26:b9:37:44:9e:37:4b:78:c1:b1:22:09:
         0f:cd:f5:1d:0f:1d:0d:07:9f:9d:e9:3f:ac:fe:24:4e:18:4d:
         55:89:af:55:6d:19:35:f5:4e:7b:f4:d1:5f:f5:fa:56:ca:e6:
         76:9f:f8:68:29:56:6a:db:be:13:e6:7d:b6:7a:54:c2:7e:57:
         e8:a4:9b:6b:95:ff:9b:e7:cd:f0:ee:e7:20:d3:cd:6f:16:14:
         79:8c:47:a4:42:fa:21:6e:4d:44:2a:f7:22:e8:0b:8d:7f:cd:
         39:34:28:6d:62:98:f8:87:6d:e2:79:c5:3c:57:f1:67:5e:f4:
         10:10:dc:d2:36:74:d0:72:5e:33:49:2f:aa:17:7f:c6:bc:40:
         1b:9c:c7:4d:88:f7:1d:0a:68:a5:27:11:69:7e:49:24:04:7b:
         74:c7:14:ed:3f:69:4e:05:89:e0:93:6a:9d:c5:ca:5c:11:db:
         f6:d0:d7:58:40:71:19:2f:ee:6b:a0:1f:3d:8e:53:cc:84:0d:
         5e:ac:e2:f6:8a:33:f3:3c:a7:8d:06:73:68:a5:3d:71:aa:6d:
         89:0b:bd:59:ff:20:14:f7:19:ce:b2:b6:cb:91:2e:e3:01:4e:
         88:07:ae:12:c4:a0:59:5e:07:f5:ea:7e:7b:bb:7f:1c:91:bd:
         84:15:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----