Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File:                     xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier:          SbPcHjYqu9zxauoZDFkKimAFHFp0t5+maGSy3GFAZ5w=
Subject key identifier:   5C:E5:97:A7:16:5A:35:89:B6:81:DF:38:F3:16:1B:EE:27:92:75:65
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer:       /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial:       01962FAB285402CDEA46F7389F5C3EAC8F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number:          024D
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
                          2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
                          3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: ejU14ndq0zv6rX1+e+l7wHwyozCM4PH01wfb6NjYYAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:54:02:cd:ea:46:f7:38:9f:5c:3e:ac:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=5ce597a7165a3589b681df38f3161bee27927565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:c2:bd:91:5a:82:73:7b:56:dd:4a:fc:c6:
                    90:f2:db:2a:cc:14:1f:f7:f0:d4:ea:7c:23:5a:7f:
                    64:8a:c2:24:2a:97:5f:88:17:6d:5f:6a:bd:1e:ff:
                    c0:91:c8:bb:a6:94:ca:b6:9e:3a:2d:c7:30:d9:a6:
                    a9:04:22:5c:05:64:80:2a:45:10:25:61:44:4b:b1:
                    cc:f2:1d:0a:4a:94:36:5c:d2:9a:e0:60:b5:c0:7b:
                    72:88:0c:84:c2:3e:dd:0d:13:2c:f1:bc:6d:15:02:
                    26:56:ac:ca:7c:2c:4e:f2:11:29:c1:2c:05:d7:c8:
                    83:43:e4:53:1d:90:fb:41:4d:30:5b:db:c4:21:29:
                    78:e6:64:53:9f:17:b7:64:9a:2c:cf:2a:e2:20:75:
                    ca:9a:59:79:66:4f:75:76:0e:8c:33:2b:15:51:96:
                    3a:24:6f:5a:08:5a:39:4b:28:99:fe:6c:65:a1:21:
                    7f:a2:e3:35:21:c3:71:52:43:29:c6:10:b9:a5:f1:
                    1d:f7:3c:04:71:a7:50:fb:e6:bb:01:5b:d5:e7:9e:
                    6b:22:69:09:14:c4:17:74:d8:cc:bd:f1:e5:80:44:
                    9f:94:66:f9:70:48:8a:c1:7e:d8:1c:2b:e4:ec:d4:
                    2f:53:36:ce:57:b8:2f:a7:88:c6:f0:c9:55:f7:09:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:97:A7:16:5A:35:89:B6:81:DF:38:F3:16:1B:EE:27:92:75:65
            X509v3 Authority Key Identifier:
                keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:95:9d:7f:23:60:56:aa:f5:94:ec:e4:12:95:a4:53:c0:
         0d:a6:ad:de:ee:c8:0d:c2:04:2a:21:c3:24:bf:c1:2a:a7:30:
         dd:bb:8d:d8:ed:47:86:74:71:75:df:00:40:f9:da:ca:34:7b:
         83:88:fb:78:ba:4e:9d:7f:b2:d6:4e:ad:4c:91:ae:1c:a7:11:
         e6:90:8a:1c:87:f2:ee:63:0d:6c:7d:c0:02:fd:4a:28:1e:19:
         eb:87:7c:1a:d5:5e:6e:82:49:d3:f1:88:74:29:44:ef:c4:06:
         b1:16:54:63:d3:ef:fb:fd:5a:c7:6d:46:a3:22:7e:ab:2f:94:
         84:81:e0:0b:32:34:d8:d1:a3:e6:40:29:49:03:bd:7f:20:89:
         11:12:14:c7:51:40:01:a7:78:85:49:59:d6:c5:27:8c:0c:d3:
         df:a4:70:51:84:d7:fa:4b:7e:ad:7f:cf:a6:52:71:f0:5e:ab:
         f2:29:d8:1d:62:a5:0e:7d:f6:66:d9:d3:f3:d2:cc:78:44:44:
         b7:63:f6:54:7a:50:4d:2e:ab:9d:79:4d:40:92:c3:37:fc:cc:
         74:2c:fe:c5:3d:24:35:61:37:69:4b:07:05:6b:a0:d2:24:27:
         71:0a:ae:d8:97:20:8a:d4:e5:b2:d3:de:fc:21:8d:6d:30:d3:
         20:5b:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----