Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          H93eJI+rXRBu4KEGJ5XBPEU+NhMYVqKkYBgFufVLIDI=
Subject key identifier:   BD:CE:67:AD:51:7A:5B:81:52:3D:63:64:45:A5:70:FB:FE:AE:D4:23
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       01962DF3B8BC9AC2702804EACEBA64CC6053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          06AD
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: yaxVsIA79enVOp8GmSkr0O6PTM+v2huEcNmHTrr/GCE=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b8:bc:9a:c2:70:28:04:ea:ce:ba:64:cc:60:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=bdce67ad517a5b81523d636445a570fbfeaed423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:df:04:fc:ae:13:c5:a3:25:a9:b2:80:e7:
                    16:18:0d:18:03:32:ce:04:7c:0c:47:3f:8c:91:6e:
                    c9:b8:9a:cb:7a:61:d4:98:a0:21:00:ca:91:2f:e2:
                    48:16:82:da:b6:4a:86:01:54:81:5c:a1:ef:9c:e0:
                    e5:0a:2c:b1:d1:d1:a1:71:c0:d8:8d:88:e5:e7:97:
                    cb:e5:85:25:31:7e:50:d8:3b:d0:ac:3a:5d:e3:4e:
                    d9:5a:95:b9:db:e9:94:9c:c1:a3:de:9c:34:2d:15:
                    fb:8f:32:77:78:40:cc:2b:f6:1f:a5:af:d3:c7:8c:
                    e9:40:ad:ce:79:f0:83:5e:34:25:26:fc:9d:e2:19:
                    91:e0:de:c8:7d:a8:01:10:7f:d2:77:cb:41:f4:5c:
                    8a:0a:8a:3f:06:fb:50:80:ad:ab:45:6b:68:11:91:
                    bf:aa:eb:07:06:1e:c5:1d:89:e0:f7:f9:41:4d:29:
                    e0:0f:52:c5:4d:28:6a:db:95:9b:a2:99:95:ef:6f:
                    ae:f4:a5:5b:c2:f1:ff:22:79:e7:78:21:08:a9:37:
                    ba:1b:b6:42:fa:dc:c9:0f:28:b2:99:f8:40:f6:5d:
                    10:c2:ce:da:9a:ae:13:20:ec:17:78:aa:1e:7c:ec:
                    68:58:e1:35:c8:11:b2:94:0f:11:7e:8a:26:f5:76:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CE:67:AD:51:7A:5B:81:52:3D:63:64:45:A5:70:FB:FE:AE:D4:23
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:54:63:77:22:de:be:4e:24:45:37:d0:ed:1d:1d:db:08:02:
         20:93:27:45:86:0f:b1:4c:c8:52:31:3d:1b:d5:ef:4f:bc:ac:
         54:d1:77:75:a3:d2:38:5f:41:3a:31:5d:e0:d9:1d:36:de:83:
         a7:92:07:fd:a0:62:fa:44:dd:32:bd:39:f0:15:51:8f:4a:36:
         e6:6d:a8:52:59:8b:84:b4:8e:e6:ac:58:10:e1:5c:94:5a:10:
         3d:75:94:0c:96:cf:d2:c9:e9:7d:60:c3:c9:90:79:8e:45:f0:
         19:63:73:b0:92:8e:ec:11:58:61:09:9a:20:91:52:2e:35:c1:
         c7:08:35:f4:bf:d4:c5:e5:52:da:48:12:25:c1:c0:78:48:b1:
         5e:4f:c8:3b:b4:f2:71:ed:3c:51:c6:d9:65:60:53:df:bb:43:
         cd:ee:9c:d4:85:aa:26:e6:60:d8:06:c4:21:42:d6:5e:41:09:
         99:b9:33:96:47:1c:94:bd:d4:77:f4:80:f5:02:a0:2c:9c:42:
         76:21:e6:e4:77:3e:1b:4b:cb:a3:c2:eb:a8:25:fd:67:61:f9:
         37:02:4e:37:b4:53:e8:6f:fa:81:8c:4e:d9:3c:13:4a:34:dc:
         9e:ca:3b:6e:b6:1a:d8:51:19:cb:4f:bb:73:fa:0c:64:5f:51:
         4d:58:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----