Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          M50zHAkwGuHfx560EFv3oTJK09UoJvSRnxCxBZOT87Y=
Subject key identifier:   4C:9E:10:20:46:AB:06:A7:DC:02:29:90:7F:34:76:DE:E1:48:14:6A
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       01962E98D5E3B810B2056FC27B86B19B4CC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          CF
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: dua6Iy03Js23yeNq3WYGuFfB3P8wHbLi3dVBPoqG/Qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:e3:b8:10:b2:05:6f:c2:7b:86:b1:9b:4c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=4c9e102046ab06a7dc0229907f3476dee148146a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:86:a0:a6:24:62:5b:85:89:a5:1b:4b:54:
                    93:61:6b:2e:40:1b:f8:ce:a5:4b:85:f0:e2:94:05:
                    86:d4:7b:cf:09:13:9e:9a:48:01:b6:d1:ad:3c:e6:
                    fd:4a:86:15:6a:5f:10:61:9f:92:d4:29:2c:40:e3:
                    27:c2:e9:d8:ca:27:b6:96:96:29:ad:18:eb:e3:69:
                    4e:12:b4:d0:d9:94:83:2d:f7:13:04:71:46:cd:e1:
                    88:55:46:9d:75:bf:73:83:06:d2:ab:3b:7b:e5:04:
                    10:a4:08:40:d2:8a:99:bf:d1:b2:05:76:8a:58:81:
                    dc:f8:d0:48:20:2b:3e:81:5c:b1:6f:6d:79:17:c7:
                    cf:5c:42:4e:d3:25:1a:0a:31:50:53:7f:f6:04:63:
                    fc:9c:13:3a:56:09:cd:18:d5:7b:df:57:48:b2:b1:
                    1a:cd:22:9c:93:32:5d:ca:0a:79:de:7b:1b:0f:3a:
                    33:50:d3:08:53:f4:26:94:da:8e:46:51:c0:fa:50:
                    51:61:7b:47:55:3d:9c:0e:12:84:40:ae:92:36:47:
                    58:39:3e:05:a6:df:70:c8:f6:de:a1:12:27:ba:06:
                    a9:ad:79:3e:9a:bd:7f:e4:96:e9:74:34:27:43:39:
                    2c:f1:f3:9a:5b:2a:e0:06:37:94:05:7d:b0:44:0a:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:10:20:46:AB:06:A7:DC:02:29:90:7F:34:76:DE:E1:48:14:6A
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:b4:da:34:b0:05:5b:e6:54:77:77:e9:02:ac:10:b0:b3:
         1e:dc:70:47:d9:80:75:c5:c2:f3:4a:d7:b6:c2:16:b5:f5:22:
         83:cd:7a:dc:1c:d1:5a:4b:a0:45:cb:af:2e:9c:e5:de:8b:af:
         21:29:08:10:c8:d3:5f:5a:04:cb:88:1a:28:37:66:be:b4:35:
         67:dd:90:3e:a0:a1:49:ae:8e:80:b2:2b:ed:6c:10:9c:5a:c0:
         92:3c:70:79:66:5e:1e:cb:03:f9:f6:b5:39:1e:b4:3d:1f:4a:
         fc:3a:86:f6:c2:c9:ea:68:3c:f1:13:c7:e6:4a:81:1a:4f:04:
         d2:27:d8:6a:cd:fd:12:bd:88:6b:be:96:21:1b:20:78:1d:78:
         f9:40:b0:a2:f5:3f:37:1e:b9:77:fb:e5:d1:c3:c9:e4:b7:25:
         c8:42:3f:d8:9a:2f:37:a8:d8:07:7a:37:bb:81:3a:ca:1e:33:
         c4:fb:03:f8:96:de:47:f3:eb:e3:7b:61:b8:cc:e1:3f:67:e6:
         5d:2d:2d:35:55:62:18:dc:15:67:f7:40:54:4d:30:61:9b:1b:
         e0:92:a3:00:f3:20:39:f6:fb:fa:a8:33:69:9a:1c:70:c9:ff:
         fc:f7:70:11:c7:6c:50:5f:ba:5a:3c:70:27:74:92:15:8e:56:
         cc:48:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----