Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File:                     U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier:          P2yrjRVbPFtFsp6bkjk76tWRe44Kf46DyB/MsjFq0Ew=
Subject key identifier:   C0:A7:EE:42:32:55:94:67:ED:F6:9B:B1:7F:C1:1C:98:43:67:39:EB
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer:       /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial:       01962ECF8CB2DEF2B7FC1C714DD0B10A0556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 36Xhn9G7gknfzemD2e1s6Iab4VpF1/0ChhyZEClJ0zA=)
                          2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:b2:de:f2:b7:fc:1c:71:4d:d0:b1:0a:05:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=c0a7ee4232559467edf69bb17fc11c98436739eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:79:05:f0:7d:98:a4:03:0b:41:b0:ad:c8:
                    7f:6a:ab:f9:94:13:88:34:f0:a3:1f:16:f7:3d:8d:
                    60:60:b6:1c:76:59:0a:69:e1:3a:7b:0e:73:a0:e6:
                    6b:ef:61:5c:b8:3d:b3:d1:55:e0:8d:9a:51:2b:21:
                    1b:13:e5:72:b5:ef:ff:02:a0:38:0a:33:19:7f:f6:
                    22:d6:3c:14:b3:62:b2:eb:7b:4c:d7:cb:fc:0e:4f:
                    a9:35:92:d3:f2:f0:22:42:9f:1a:d3:ff:c7:a7:39:
                    4c:1d:46:7c:bf:8a:4d:62:23:d5:82:6d:31:95:39:
                    5d:d5:d1:95:d3:61:df:87:ba:2c:3b:71:50:4b:60:
                    35:5f:f6:ea:d6:6d:8f:ed:21:17:d4:68:02:47:91:
                    e1:64:1c:dd:d0:d2:7a:e4:62:35:95:c8:56:8c:a4:
                    9a:23:01:f7:05:3a:60:b2:5e:a5:d8:11:e9:d9:f9:
                    4d:53:0d:24:53:a0:ac:58:a1:e4:94:65:a1:3b:f6:
                    4a:98:89:9d:16:59:44:4e:6c:74:2d:9c:5b:2e:20:
                    a1:3b:e1:44:71:da:ae:e3:56:8e:b7:0a:f7:23:f7:
                    89:77:9a:5f:8c:a7:6c:43:b5:74:33:3d:67:56:8b:
                    2b:d2:7e:9d:18:ae:6d:e2:8b:a7:4b:33:eb:4e:58:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:EE:42:32:55:94:67:ED:F6:9B:B1:7F:C1:1C:98:43:67:39:EB
            X509v3 Authority Key Identifier:
                keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:ad:2a:f6:aa:22:6b:58:97:dc:9b:65:8a:26:7c:57:8c:
         67:06:73:d9:57:d7:09:40:6d:29:c9:14:03:8e:3a:94:f8:bd:
         33:cb:4f:35:06:de:14:b7:2c:24:c3:72:8f:33:12:e1:1e:3f:
         b5:38:e1:46:ef:81:73:a7:5c:bd:fb:8a:a7:a0:f5:41:02:8f:
         d8:5f:df:66:67:b2:ae:b8:7a:4a:b9:8b:8b:60:64:dd:3c:24:
         19:dc:a2:83:65:41:da:a7:62:a6:e0:e9:a3:c2:5b:24:f7:33:
         cb:68:50:b2:4b:c3:ab:47:64:73:c7:47:67:2a:ad:56:39:c9:
         86:d8:7b:a8:4e:d0:42:7a:22:35:4d:12:ed:bc:ff:30:9d:d4:
         3b:ff:db:a1:13:b5:81:11:95:bc:0c:cd:fa:28:76:e4:f6:a6:
         c9:ba:72:ff:b0:6b:de:63:dc:64:07:a9:b8:3f:89:91:a3:db:
         c6:cd:30:58:17:3e:0a:ca:a6:09:a5:45:ef:96:81:ee:d4:34:
         ca:d9:69:7b:35:94:1d:35:74:96:84:aa:36:03:18:d5:96:d1:
         88:4b:46:bf:cd:c7:b6:6c:0c:16:f3:7f:f3:df:d2:ec:f0:6b:
         46:91:76:a6:91:08:3c:68:e0:08:a4:b2:41:c5:5c:d5:83:c6:
         96:0c:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----