Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File:                     xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier:          6juiqOFH1nrBJa4AhySdLGwGvbJ36MHSSRSVqrVgUSQ=
Subject key identifier:   5E:E0:2F:33:30:A0:B5:A4:2D:3D:30:24:57:7E:61:1F:78:33:24:AE
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer:       /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial:       01962ECFE66B9E1C6269D33F78DC2F4876FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number:          0331
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=)
                          2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=)
                          3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: +YvjVc5cICxPi0B7kRlkY3w5VDCNG9OzvTX5A4Do/Fs=)
                          4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e6:6b:9e:1c:62:69:d3:3f:78:dc:2f:48:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=5ee02f3330a0b5a42d3d3024577e611f783324ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:a5:39:68:05:eb:5c:58:f0:0a:78:5b:94:
                    3f:3e:03:f7:7a:82:46:49:ba:95:4d:1c:a5:13:df:
                    38:d2:17:c3:b3:74:16:ab:34:7d:59:d6:4b:2f:9a:
                    31:60:b9:00:fc:1d:fd:19:2d:e6:e7:23:68:69:a8:
                    c0:05:78:0c:14:2f:60:fc:98:d3:82:58:26:72:2b:
                    b8:1b:ea:6a:b8:95:82:57:bb:a1:8c:d8:1b:b4:fa:
                    09:e7:fa:8f:0d:d7:b8:23:a4:bd:b9:47:d2:1c:a5:
                    15:24:db:0e:9a:c9:51:e7:71:25:27:25:69:3f:99:
                    da:f8:df:fd:7e:8f:22:ae:ed:58:93:0f:d8:ac:e9:
                    53:23:19:3b:7b:1b:27:91:2d:d9:e8:6f:d7:36:ce:
                    39:1a:63:2d:4f:70:53:3b:3a:42:21:b0:76:a8:e2:
                    23:9e:71:f9:fd:02:41:a4:e7:8c:80:bd:88:30:13:
                    03:b1:45:01:39:40:c0:36:b8:eb:b5:a3:55:9b:6e:
                    8f:e5:0a:53:a1:c6:e8:78:c9:1c:0f:f2:3e:f8:f2:
                    0e:74:45:54:7c:2e:c9:93:6d:95:ff:9a:8d:4f:c5:
                    00:12:ce:00:8e:0a:a5:79:10:59:23:d8:ad:31:c7:
                    e6:bd:89:79:af:21:c1:bf:7e:84:23:0c:c8:d7:d5:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E0:2F:33:30:A0:B5:A4:2D:3D:30:24:57:7E:61:1F:78:33:24:AE
            X509v3 Authority Key Identifier:
                keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fe:98:f7:d7:db:fe:61:57:2e:d2:a5:12:e8:de:60:b6:47:
         39:f4:34:0f:57:32:c1:68:e0:86:bb:51:64:aa:7f:05:7b:db:
         8c:ea:5d:64:d4:17:f7:c7:89:05:d1:79:37:5b:bc:37:49:3e:
         7a:68:fe:24:af:31:5d:4a:47:6e:1d:45:d9:31:78:8e:a9:2c:
         6d:43:0c:6b:52:9e:c3:99:38:82:c2:cf:37:96:b3:ba:08:b6:
         f8:70:6a:ca:ae:f6:40:fa:46:af:32:c4:6e:5f:39:55:4e:4b:
         53:eb:d6:fb:c9:1b:28:3f:5f:1b:41:ba:aa:6d:fe:83:a9:d5:
         10:f6:38:52:71:54:36:b5:cb:1a:a4:0c:f6:c1:24:32:24:e1:
         60:7e:13:fd:70:2d:a4:2a:5c:40:42:45:93:64:ab:d7:8b:ed:
         8e:9a:75:12:e0:c9:5c:a4:b2:2b:7f:4a:7d:36:b6:8c:d4:58:
         bf:72:fe:6c:13:66:69:9e:f6:75:96:bb:3f:69:3e:b3:cf:82:
         e3:30:1e:1a:f4:4a:d7:b8:98:30:9b:97:24:fb:4f:8a:48:d9:
         28:e5:fe:14:ca:d9:85:6c:ee:3b:0c:c4:46:82:62:56:cc:90:
         e4:1c:89:e8:28:d3:d2:f4:12:79:dd:8c:c9:03:4a:17:78:bd:
         0f:0b:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----