Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          kXDNmXTHAHPvgkNwFxgoDuszwEJd8l8X80CuG6N2Gak=
Subject key identifier:   C4:26:E2:D5:69:80:9B:BE:EE:5A:81:CB:BC:C0:72:28:9B:E3:F2:71
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       01962DF43A2C588D0D44E2CA5AEF3BD28BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: OO7bDjuh4G4HVJkAxRyJAHrww5dNlVe7Y7h30FMZSPA=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3a:2c:58:8d:0d:44:e2:ca:5a:ef:3b:d2:8b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=c426e2d569809bbeee5a81cbbcc072289be3f271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:83:37:ab:62:9f:00:cc:61:5e:ab:3f:5d:
                    83:7b:80:e6:5d:93:6f:ab:7f:ba:b9:21:ef:fb:dc:
                    3e:60:28:83:bc:a7:b5:52:26:76:12:65:3a:2e:1f:
                    08:f6:ea:37:57:8c:7c:f1:b5:8d:17:d2:7c:3b:c0:
                    91:65:1b:52:c9:bf:6b:dd:71:0e:f7:de:d1:1c:b8:
                    1e:dd:0c:6e:13:c4:23:a9:12:35:6d:78:c4:97:f1:
                    fb:22:46:fa:c5:4d:16:dc:9c:c1:f8:40:3b:4c:20:
                    de:49:98:da:aa:61:50:2c:fd:b5:91:7c:fe:6f:51:
                    c8:da:c8:90:bd:25:4b:e8:ff:68:0c:c1:21:8d:13:
                    fd:7a:03:c5:16:a4:30:25:52:6c:12:67:6a:26:0b:
                    29:e2:e2:41:56:6f:04:10:e2:4a:e6:b3:a2:0a:93:
                    09:5f:74:73:96:09:15:73:94:48:14:e1:98:bb:18:
                    b2:ad:2d:63:4c:63:3d:14:f9:90:0b:a5:fe:43:e6:
                    e6:3d:8f:4c:d7:23:17:eb:86:79:86:6e:fa:bd:a7:
                    2a:42:51:84:3d:72:9f:ce:e7:6b:87:94:5c:26:db:
                    56:ed:75:11:22:01:a3:73:3c:57:8f:05:51:8c:8a:
                    d9:d6:54:37:36:87:06:1d:97:17:c2:aa:98:e7:8e:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:E2:D5:69:80:9B:BE:EE:5A:81:CB:BC:C0:72:28:9B:E3:F2:71
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:50:66:41:18:cb:3c:b1:fa:19:aa:f5:87:ab:eb:22:f3:
         89:3c:58:ec:68:d0:ed:74:35:21:1e:82:96:2d:76:63:9d:82:
         42:82:e9:45:3f:f3:c8:9d:0c:77:c4:e7:ce:f5:77:49:ce:3e:
         ee:64:c6:b5:46:89:a6:bf:92:c3:dc:c7:39:46:96:6d:ff:8d:
         fa:19:ac:00:80:3f:fe:f8:5c:8f:78:33:06:9d:5e:1d:21:95:
         9a:f0:54:33:7b:b8:d9:af:03:53:db:ad:90:1a:8d:9c:d0:d0:
         56:1c:c3:df:1d:74:24:e6:87:28:3d:79:74:ad:c9:ae:7d:2b:
         23:a4:6c:8f:78:82:21:ae:ba:3c:82:9f:b9:c9:e9:e5:cc:75:
         d2:0c:21:0d:65:96:42:5a:83:81:b8:3f:be:0a:01:98:03:0d:
         dc:8c:aa:75:b7:19:48:35:cd:ab:e0:71:58:a1:ef:f1:26:77:
         d3:22:1f:07:2e:f6:a8:9f:ad:12:79:68:96:50:bd:f4:63:19:
         c5:01:fb:7c:d9:db:bf:8e:36:42:42:86:19:c6:c8:c6:c8:1c:
         9b:38:fc:42:2f:03:d5:c3:3d:92:c5:05:3b:11:c4:5b:14:42:
         38:01:4c:bd:ad:32:af:81:64:4d:40:41:ee:10:fd:92:09:06:
         86:a1:31:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----