Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File:                     5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier:          VauxRaZC/Op4DRTKLgH8KzRYA8+4mLni/wGkp7UDang=
Subject key identifier:   4D:88:D7:22:F8:EF:3F:3F:4C:C5:61:63:CA:36:EC:E3:93:97:00:41
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       01962FAB20832215A2DC455FC7437E6883BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (hash: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=)
                          2: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: qyZcENNoe123KmDZfgKKCsXkZ/2nDczMrkLFrYLsfyM=)
                          3: FkwWWQIMWtA4iybPzQx4iJn4LA4.roa (hash: dygheTAaWRRRFFcR/Y94QKMdhM+IdtEOUxFApI6osJI=)
                          4: nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (hash: aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:83:22:15:a2:dc:45:5f:c7:43:7e:68:83:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=4d88d722f8ef3f3f4cc56163ca36ece393970041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:88:52:63:21:0e:e1:f1:71:2c:5a:04:8d:
                    92:e9:93:39:9f:4c:32:d2:da:00:eb:48:9b:18:3c:
                    d3:3f:97:78:be:b4:7c:b1:1e:bf:9b:44:9f:34:32:
                    2b:0c:73:59:dc:1c:13:f6:c4:cc:49:27:42:ba:0f:
                    ed:14:71:54:63:81:d9:64:10:c5:f7:66:a5:08:ef:
                    d9:46:68:3c:24:70:16:69:99:87:10:65:cf:77:04:
                    49:46:e3:f4:5f:a6:3c:c3:d6:e0:1c:ae:2f:2d:ba:
                    16:68:27:d6:76:b4:66:e3:19:41:fb:fd:96:9d:79:
                    38:ed:f5:4a:4d:19:a1:26:e1:76:3d:ac:9e:58:f2:
                    67:1b:02:97:47:73:24:8b:32:e8:d7:7a:00:3b:4b:
                    ce:5f:81:89:95:40:23:51:ce:5a:31:d7:39:dd:7e:
                    7a:80:55:91:86:81:f6:9a:6d:98:09:7b:15:f5:a3:
                    ca:db:6d:0d:54:8b:cf:2c:32:4c:93:3d:91:a9:eb:
                    49:02:6b:6f:89:ea:80:08:4b:3d:27:a7:fe:c9:82:
                    f5:f5:d8:13:29:5a:1e:7f:b9:c2:d7:53:48:54:5f:
                    18:d3:ad:6b:5e:73:af:5d:e6:59:7c:62:e5:02:4d:
                    ff:90:fe:e9:4d:36:dd:3b:f3:57:de:ce:a3:47:70:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:88:D7:22:F8:EF:3F:3F:4C:C5:61:63:CA:36:EC:E3:93:97:00:41
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:03:55:2e:8a:b5:b0:68:fe:9d:67:53:43:1c:bb:59:91:
         05:60:92:06:ee:9f:bc:a2:c3:52:f5:6f:36:72:ff:f2:17:6d:
         cd:3e:94:58:42:e4:aa:e4:e2:f6:fe:c1:14:af:5f:0a:06:af:
         d1:4c:39:2d:66:f3:84:fe:73:e1:ad:ec:88:61:37:fe:62:2b:
         2f:41:b2:83:72:fa:4a:14:f3:e7:0e:e7:80:0c:75:36:ea:ca:
         76:0c:e1:ab:96:eb:6b:bf:60:ec:3e:fc:0d:6a:88:3b:2c:d8:
         6d:a4:28:c3:42:94:10:08:01:86:22:83:9b:bf:a3:1f:26:a5:
         9d:15:43:e1:4d:3a:87:db:42:38:7b:70:fa:4f:6a:eb:cd:e2:
         eb:8f:7e:6c:69:69:33:7a:be:78:5f:de:86:ac:9b:3b:82:74:
         55:d1:90:f0:1e:2f:ef:f2:2c:ff:7f:4e:d2:44:6c:fb:ed:65:
         c8:ec:42:4a:48:20:a8:e1:2c:25:b5:a3:0c:ba:96:b4:69:09:
         f0:89:bd:e0:3a:d4:d9:ab:1b:2e:74:e6:63:0b:23:f2:49:7d:
         40:98:9e:4d:35:fe:53:e9:b0:2c:ed:c8:cb:fd:01:3d:4e:6b:
         9e:79:cf:e6:8c:e8:3f:8b:1c:b7:af:b5:8b:1f:fb:76:d7:98:
         88:42:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----