Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          5Ees/ZY6VUn56pT5bIh2E1xbb56RB3lvi8cxpkBEGpc=
Subject key identifier:   E9:17:FB:FE:A6:F5:0A:63:4D:85:CA:5D:57:C7:E0:77:5C:9F:38:E8
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       01962F746A3DB1EC7C8D97A45E75E69DF853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1504
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
                          2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
                          3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=)
                          4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: Et/5dB8wSE506C/B2VEi0FIh5oeSx4rgencH+D2XOxY=)
                          5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6a:3d:b1:ec:7c:8d:97:a4:5e:75:e6:9d:f8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=e917fbfea6f50a634d85ca5d57c7e0775c9f38e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:07:21:53:b9:a7:64:23:a3:60:0a:29:ec:
                    dd:a4:64:68:38:b6:38:84:ce:29:e8:6b:66:c9:2b:
                    46:e5:47:93:18:3f:4e:b8:19:2e:17:75:2d:6f:dc:
                    3f:ba:9d:36:ed:fb:2c:36:11:84:b7:4c:da:a4:c9:
                    db:df:ff:d2:f6:fd:55:9f:d3:95:22:be:21:65:57:
                    7d:cf:8b:c2:25:6f:50:ea:df:ca:31:b8:38:9d:50:
                    da:bc:70:e0:97:c1:e9:4f:42:78:cd:f8:9c:ec:e4:
                    78:c7:e1:d7:05:9c:7f:9e:be:68:ac:07:67:4e:10:
                    7e:7c:64:11:96:50:6b:2f:21:37:bb:d5:09:a9:09:
                    e8:ae:a0:df:b5:6b:e8:3f:80:a6:8f:db:45:ce:03:
                    c5:ab:ec:79:fb:72:df:bf:70:ce:9f:6a:19:b1:8b:
                    c2:db:ee:b8:58:82:d5:2c:5e:00:6f:df:70:61:5e:
                    86:12:fc:65:10:40:3f:81:db:d6:1a:60:7a:ef:ba:
                    f3:72:94:dc:94:05:37:aa:80:44:ff:78:e0:ca:cf:
                    fb:76:56:3b:cd:65:fe:1a:bb:37:33:8f:fd:d8:a8:
                    a5:f7:2b:a8:d0:be:b2:ca:94:c9:46:e8:7c:dc:b1:
                    7f:55:e9:12:bb:01:38:5e:90:cb:2e:39:53:37:58:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:17:FB:FE:A6:F5:0A:63:4D:85:CA:5D:57:C7:E0:77:5C:9F:38:E8
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:da:ea:91:f8:93:67:e2:3f:2d:de:6a:82:87:2d:51:8a:
         24:f8:34:4a:eb:3b:1c:6a:17:00:b4:e1:98:32:e4:37:de:6c:
         c8:97:74:8a:6c:27:42:75:86:1b:f4:43:4d:23:88:90:f8:94:
         bb:df:d9:dc:2b:89:fb:5e:10:ef:ed:cc:89:89:ae:7b:24:93:
         f9:09:fe:7e:19:60:f8:39:5f:1b:29:7f:cc:e4:49:87:50:a6:
         73:b0:e9:f2:8a:04:d8:b0:49:9e:c9:4f:8c:d2:f7:dc:5d:3d:
         f3:f8:0b:7a:21:80:19:84:18:9d:10:a6:7b:01:fd:55:d9:ec:
         9a:78:fc:37:1a:d6:94:c5:e8:c5:82:9a:a5:c6:77:87:15:c3:
         80:b5:05:81:4c:4c:71:a9:a3:ed:48:e2:1d:5d:30:f0:3a:9f:
         20:c4:ba:04:12:8f:a1:89:ab:8a:57:e6:3f:b1:9a:70:bb:16:
         45:e2:d6:d0:10:04:50:1f:41:4c:6b:b0:fd:a2:3f:d3:3c:92:
         32:a3:d7:b6:16:69:51:9c:0e:04:e9:6e:a8:dc:11:4a:0c:65:
         f1:3a:1d:6a:0d:50:b3:ec:58:c8:9c:6a:38:d3:7b:fd:78:53:
         54:e6:f6:ef:22:de:72:50:92:ac:ae:8e:ca:b5:00:af:c8:85:
         b4:be:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----