Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          le2L/eMEVRk4Tv+FZPCMPxXOnJO+t2dKv+QhrUhFmJE=
Subject key identifier:   0C:7D:C2:60:0B:F8:A8:4D:5E:F1:50:A8:60:24:0B:F8:AC:4D:4D:11
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       01962E9924EA4AADE84818C35C4B5ED72660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          0584
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: 4kR89sLAqkPwhn_ralqMLx5vnmw.roa (hash: aW/S/miakzFOlENse9MXKWvU/sKShiO+PJNe9e/OxYg=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: npbl4dxkhRV7CqThEqBpuC8fKrIBaikvoZGMIYg1jVk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:24:ea:4a:ad:e8:48:18:c3:5c:4b:5e:d7:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=0c7dc2600bf8a84d5ef150a860240bf8ac4d4d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:18:86:c4:36:81:a5:66:ef:31:60:18:c9:
                    e2:87:3f:92:8f:6b:8d:72:2c:52:87:79:3f:5d:5e:
                    d4:b3:36:92:df:23:94:32:fa:2e:90:61:06:6e:c2:
                    d2:8d:9b:93:48:db:9b:15:42:53:c4:52:2d:2c:71:
                    21:01:f9:35:de:ad:90:12:0b:ef:bd:20:24:27:1d:
                    c4:6a:7e:21:43:87:7d:d4:64:77:d6:e8:80:d1:03:
                    a7:24:99:ec:e9:39:4e:8f:72:e6:52:da:d0:07:64:
                    4d:94:06:17:d5:ea:a1:8e:20:68:c5:b8:7a:f5:13:
                    da:1c:e3:ea:71:55:63:95:6a:14:2d:cb:03:a4:23:
                    56:f7:6c:87:ef:26:cc:23:61:ac:7e:cc:83:ee:6b:
                    70:71:5f:e7:53:d2:29:e2:b5:28:4f:c8:70:3c:23:
                    51:a9:69:d7:e3:f8:2f:45:11:ca:fe:14:98:1d:b3:
                    ff:53:06:30:2c:49:c1:18:d5:b9:b4:77:29:4c:1d:
                    9f:49:58:8f:aa:2c:71:d1:bd:d7:2a:6e:bc:88:ba:
                    b2:01:13:c1:e4:7d:fa:63:26:ad:d8:5a:58:9e:dc:
                    d9:6a:a2:8a:bb:9b:62:f7:df:08:2c:db:f7:29:0d:
                    43:d1:7b:8f:bf:c1:55:e0:92:d5:9c:2e:a6:59:36:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:C2:60:0B:F8:A8:4D:5E:F1:50:A8:60:24:0B:F8:AC:4D:4D:11
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:a7:2f:34:15:cd:12:12:43:d7:5b:7d:32:c5:a2:44:c0:
         10:9a:7f:de:0a:08:92:55:7c:74:64:64:58:db:ea:d3:58:37:
         20:d4:c5:86:ce:d3:cf:ac:b6:b2:80:d9:84:45:30:51:61:43:
         d4:92:03:6b:45:2a:cd:5b:67:1c:f8:36:9c:29:82:d2:26:9a:
         d5:bc:b7:93:4a:72:5f:65:1f:a0:dd:3a:c6:a1:a9:65:08:70:
         b3:ad:96:d3:df:b2:50:e2:c9:e2:13:b2:81:4e:0a:51:38:45:
         8d:e6:9a:0a:ed:51:5a:29:11:e9:2a:88:3c:87:f7:95:53:50:
         47:55:21:0f:78:0a:62:5b:02:ac:22:b0:60:3f:e9:15:5a:2f:
         f9:ac:e7:62:7f:dd:98:40:aa:d1:9d:a7:1e:ae:cf:e3:3b:c4:
         84:0b:78:0b:c2:6d:b2:32:85:f8:63:38:73:ed:46:ad:aa:b7:
         2a:6e:67:7a:b3:52:2a:bc:1f:e8:11:6b:0f:38:8c:63:26:c5:
         47:3d:48:7b:23:05:c6:fe:1f:14:b4:d8:7d:ca:7f:16:46:4e:
         77:36:b8:c0:13:dc:79:1d:b9:01:5d:07:66:1d:c9:a1:06:da:
         fc:8f:4b:21:52:1b:a9:db:00:e4:53:3e:a7:19:e6:0d:bd:24:
         29:39:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----