Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File:                     Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier:          or9uNOdXIaY+u7EYZbNWUyB8EF4+3prtetH4PpsJWsY=
Subject key identifier:   B4:3C:76:81:9E:5F:2D:00:DF:55:1A:C1:D7:2F:97:F4:8C:9D:2E:9F
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer:       /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial:       01962F06FB402135ACF98648DBEDA00FC23C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: s1JIxsztG89jqOzKkSH9dC6p3Z1OO6/MuNuKxL2VTxE=)
                          2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:40:21:35:ac:f9:86:48:db:ed:a0:0f:c2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=b43c76819e5f2d00df551ac1d72f97f48c9d2e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:05:73:4b:22:20:6b:da:bd:ac:a2:90:3b:
                    e5:ce:f9:e6:a8:ca:72:ff:42:00:06:15:80:45:f3:
                    7c:44:96:6f:4d:88:1b:05:6c:f8:8b:ef:a0:9b:2f:
                    32:48:75:f2:4b:d6:06:24:71:e6:e0:ca:82:52:79:
                    e0:4f:84:81:85:4c:6a:98:4e:db:1c:a3:73:e9:40:
                    4c:83:52:c5:10:93:5c:bf:06:a9:be:d4:cd:39:eb:
                    0c:7a:30:35:64:d5:be:38:e1:35:8f:82:00:b9:a6:
                    36:23:a1:41:c4:5e:53:26:1b:20:9c:26:78:d4:ff:
                    1a:54:05:9b:13:be:de:3a:5f:1d:a0:e0:f2:37:c8:
                    fb:9a:dc:3c:fd:9e:31:a7:b1:5a:61:68:5f:a9:48:
                    8d:a2:f9:b5:5f:73:5d:22:7e:35:19:ee:51:a5:74:
                    58:ab:d3:e0:9f:ec:cf:27:fc:9d:43:7e:01:e0:8f:
                    0d:78:2d:de:78:ff:ed:cd:66:14:ce:6c:43:b0:dc:
                    e0:9d:b8:05:b3:a7:f9:9e:3e:90:d0:12:cf:c6:cc:
                    68:cb:aa:27:7f:54:83:99:c3:2d:47:eb:b5:2d:6a:
                    14:3b:e9:cd:22:6f:d4:fc:2e:37:60:43:c9:91:ee:
                    3b:bf:1d:bb:17:e1:be:f0:73:7d:cd:ed:d2:9e:61:
                    22:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:76:81:9E:5F:2D:00:DF:55:1A:C1:D7:2F:97:F4:8C:9D:2E:9F
            X509v3 Authority Key Identifier:
                keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:d4:e6:c5:22:21:02:03:08:b7:be:cb:5b:db:58:57:17:
         2f:18:37:ab:19:36:a1:1a:f8:4b:87:16:e3:fe:03:45:70:d6:
         57:2d:0f:a4:fd:de:dd:88:ea:85:c0:13:5d:17:58:b1:c7:76:
         39:e6:05:b1:29:b7:d9:b1:c6:2c:cd:73:0b:82:74:39:79:2b:
         cd:d9:f7:9f:96:31:bd:d5:ea:ea:d0:19:53:aa:8b:5f:33:3d:
         7f:41:26:76:12:ab:34:c8:cb:a9:a4:bd:66:c2:c0:50:21:ee:
         df:a4:6c:fb:25:6c:46:ce:82:11:b2:99:14:ef:5e:a1:c2:dd:
         1b:0a:1c:9b:c8:28:e8:77:92:92:10:ab:06:ea:df:cf:19:14:
         9e:86:ec:3d:9d:d9:ee:e8:10:a2:3d:eb:7e:85:cd:53:6a:6f:
         f2:4f:46:2e:44:3a:36:c3:45:fe:62:bb:63:e5:03:40:0e:50:
         09:7c:0b:4e:16:3f:a4:06:50:1a:76:c5:eb:ba:c0:bf:b8:02:
         34:5d:15:4c:2d:6c:81:d9:9b:79:57:67:7b:e8:99:8b:fe:01:
         2b:75:d7:6b:13:6f:3f:38:5d:13:0e:3e:3a:14:78:b3:96:18:
         ae:41:38:31:66:fe:58:03:d5:3d:74:68:b9:8f:da:a1:ef:68:
         43:a0:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----