Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          +858a0dJHzVU09HnOShejfa+j516V+9WwkGJhmA2iW4=
Subject key identifier:   1E:B6:47:BB:22:96:EF:63:A2:74:01:F9:AA:38:E3:C2:A9:34:6E:F3
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       01962E98B77BDD421763D2317E221875A2C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: nBTMKjB5Vd2Gr5g1ZXwxYIZLZ+XDRvudTinqqI8JQBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b7:7b:dd:42:17:63:d2:31:7e:22:18:75:a2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=1eb647bb2296ef63a27401f9aa38e3c2a9346ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:df:1d:e5:3e:be:22:53:cd:8a:64:98:4e:
                    89:ee:0b:af:52:de:25:24:35:e6:7e:41:4b:05:49:
                    5e:ce:a4:f8:3a:e3:8e:bf:2c:09:26:57:3c:8b:19:
                    10:26:1d:3a:49:f5:75:8c:9e:81:7f:ca:b4:96:80:
                    0e:94:ef:19:64:63:a3:1e:c2:34:65:2e:d2:06:1d:
                    c9:27:62:3b:6d:86:9e:f4:43:48:c4:ff:1f:d2:54:
                    55:45:4c:a7:b9:c1:7a:70:48:f8:3a:d4:a1:d2:9e:
                    f2:9b:ed:c9:a6:e7:48:27:6c:88:45:2b:12:ce:af:
                    99:ab:6b:83:7f:d5:e9:4b:3d:ce:d6:80:c4:db:98:
                    9e:89:a5:e6:b8:be:2d:31:2a:61:a0:4e:29:6c:a4:
                    8e:66:e5:9f:59:34:bb:33:63:e0:35:54:95:06:96:
                    48:9a:c5:17:31:51:71:87:6a:5c:18:5b:d8:22:36:
                    96:a2:24:30:d0:77:3f:d4:c8:d4:c2:32:37:28:93:
                    13:f7:c5:f4:e9:69:f4:c3:38:9e:51:6a:a6:8b:61:
                    70:53:ea:02:c9:6c:10:45:ae:e3:bb:9e:42:eb:f5:
                    02:b0:62:5f:3b:d0:84:7e:b8:e6:51:1a:0c:f7:11:
                    10:a3:1a:04:a3:90:22:6a:5c:22:6e:e0:4b:f8:57:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:47:BB:22:96:EF:63:A2:74:01:F9:AA:38:E3:C2:A9:34:6E:F3
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:af:2b:4a:4c:af:21:c4:c9:e8:bb:30:eb:ba:ec:23:2b:
         d1:50:2d:99:d7:e7:fd:98:9f:6c:9a:e7:01:6e:5f:c1:40:16:
         af:61:a2:f2:ba:9f:00:44:9a:d3:2c:b1:1c:35:32:77:b6:be:
         69:a7:ad:17:32:76:43:2f:5c:be:8f:37:d0:b0:8f:60:8e:3d:
         a8:e1:c7:4c:31:d5:8b:6a:f6:85:09:fd:72:fb:76:64:08:28:
         aa:49:4f:6e:e3:60:41:a9:33:4a:00:6c:3e:c9:ae:22:ac:0e:
         5c:4f:ac:0b:7e:23:94:fe:33:32:0d:ec:ed:59:ac:51:ed:87:
         8f:47:67:f6:95:a3:06:1c:69:2f:fd:e1:bb:b7:40:1c:7a:07:
         d6:2f:99:f1:0f:5d:82:4b:da:3a:f4:31:01:ba:d2:07:12:ec:
         da:77:4b:f6:e5:12:14:14:54:40:6f:d8:bc:51:6f:3c:0c:55:
         6a:e2:20:dd:55:55:db:f0:cf:c2:c6:29:76:18:b5:21:36:52:
         02:af:8f:68:68:34:f1:e1:7b:2d:84:ae:93:7f:9e:72:05:f1:
         72:3c:9d:43:9b:8d:34:3d:3f:6e:45:e3:42:a3:a2:0d:e2:4a:
         6f:30:ff:ce:0e:3b:f0:ec:b8:b0:1a:57:25:fb:df:85:89:36:
         32:38:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----