Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File:                     S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier:          9Cv09MMU0zkjnOdg832Rib4HR+TpJys9xCpOsPW8Q7s=
Subject key identifier:   CB:4C:CD:48:EF:B1:08:FF:31:BE:E0:74:05:66:A1:3B:AD:FA:F4:D9
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer:       /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial:       01962F3D52856050F97CDB29721C901B9847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number:          087D
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: J7p5wtvbY-cMGJ6nvKT1OtYA-Zs.roa (hash: /UHQgN6Hv0VvhpZbRReiWBOzZfKm+MHd/Eg+DBeHzxk=)
                          2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: zTJg4CsjVzndj4ixFuwfdZEX8zSskx4LNELZ6xubVnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:52:85:60:50:f9:7c:db:29:72:1c:90:1b:98:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=cb4ccd48efb108ff31bee0740566a13badfaf4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:8d:c7:72:42:27:cd:1a:f6:a8:ef:a3:0b:
                    f6:77:a9:8d:a4:12:db:f9:64:a7:d6:c7:ef:58:8e:
                    92:7d:ba:52:94:a8:df:41:ba:b3:43:1e:28:44:c8:
                    ff:b8:8c:1b:b9:ee:90:e2:5d:fa:5d:0b:52:f0:45:
                    e1:4b:03:77:fd:ed:28:04:13:57:8d:31:b1:d2:07:
                    b5:54:ae:81:5e:f8:9b:ef:92:cc:55:a3:ec:f6:b5:
                    eb:f6:ae:6a:71:4e:cf:91:5b:54:5c:e8:d2:1c:dc:
                    5f:d7:be:85:b3:d9:e0:33:cd:b1:6d:48:77:01:bc:
                    d5:f9:e8:5e:0c:75:8f:9a:94:7b:83:36:84:db:3d:
                    d5:71:bf:a8:f8:69:4d:de:89:16:4f:81:ee:75:47:
                    82:02:e6:14:84:eb:e5:04:54:94:6c:8c:74:4b:39:
                    3a:9d:21:c8:77:25:49:f5:ea:00:a0:28:83:ec:ed:
                    d0:b1:e1:27:89:48:49:d8:88:34:8d:10:a0:f2:06:
                    fc:3e:77:5f:13:0a:d9:bb:d7:ce:cb:dc:8e:1e:dd:
                    6a:b6:0a:24:81:83:1a:10:43:21:03:7e:ce:4d:10:
                    2b:1e:0f:f7:60:c9:57:c5:62:e0:75:b0:12:28:42:
                    4f:f5:aa:07:17:e2:e6:4b:22:9f:06:9b:31:de:cd:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:CD:48:EF:B1:08:FF:31:BE:E0:74:05:66:A1:3B:AD:FA:F4:D9
            X509v3 Authority Key Identifier:
                keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:80:ee:55:ae:d5:3a:5d:86:dc:7e:21:f2:82:69:93:5e:ad:
         d3:7d:1c:8b:06:2b:07:a0:e8:be:d2:69:b5:9c:63:84:78:a5:
         bd:95:6f:2b:6f:0d:32:86:b4:17:3e:43:4c:b1:e7:75:78:30:
         8a:3c:fd:57:36:08:65:ac:91:6c:8f:f6:52:d7:2b:bf:35:22:
         47:42:81:30:40:ab:f2:9b:63:7d:88:9d:aa:03:73:4a:b7:ab:
         df:27:0b:ab:51:f3:9d:2e:c8:29:d6:db:4e:7a:11:06:a5:1c:
         c3:fb:fc:fe:8b:15:9b:18:95:ce:76:06:0e:0c:ed:30:86:0e:
         04:38:fa:5d:63:8c:85:fc:ea:00:cc:1e:4b:3f:77:76:8a:4d:
         76:a7:25:f7:e2:e6:f4:c7:8c:5a:6e:06:00:01:be:30:88:3d:
         0e:f0:5f:58:ec:e7:85:af:44:16:d0:a5:03:42:d5:43:b7:68:
         e1:b1:ad:d0:c6:f3:0d:72:f6:e5:19:37:5e:8e:65:1e:f1:05:
         d7:29:8b:b0:42:26:3c:23:a4:eb:d2:73:ee:b8:9a:3b:5e:a9:
         78:0b:ac:84:1e:77:f8:d6:46:4b:04:30:f7:22:04:e3:b3:52:
         64:13:75:f6:d3:ee:b1:47:e9:ac:1a:06:fb:69:ca:96:67:a1:
         05:0c:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----