Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          sc3a3Ly8NTEQ7wXgb8+TipW+/ZVTHgc/U4ty5O7XsOU=
Subject key identifier:   56:8A:6B:D2:89:A0:A4:C8:13:55:29:DF:3B:C1:6E:D2:5B:DA:9D:A1
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       01962DF3AEEBD42DC68EB7621705FA0592E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: ogkeyo5af9TyUIz4+VOqrvQTSjPDmOmvU/0LXVz46uQ=)
                          2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=)
                          3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=)
                          4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:eb:d4:2d:c6:8e:b7:62:17:05:fa:05:92:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=568a6bd289a0a4c8135529df3bc16ed25bda9da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:2a:21:20:73:e1:49:4b:21:8a:9b:46:06:
                    20:72:5a:a0:ae:4d:ef:a9:74:2b:3e:cd:01:00:42:
                    8a:5d:4e:a1:d9:25:d1:e3:5f:82:78:af:8f:61:31:
                    46:61:6f:7a:20:55:05:0d:4b:d9:15:f5:20:b1:0f:
                    9e:b0:c6:d5:d2:94:cf:dc:b2:94:cb:cc:a9:9c:56:
                    e8:92:a9:b0:7b:2a:44:1e:fd:00:95:2e:f3:c7:46:
                    e1:c1:af:14:2c:a4:cc:1c:a1:7a:f6:da:f4:3f:c0:
                    eb:72:6e:a7:dd:ca:42:e4:43:7b:0f:db:50:75:d0:
                    df:37:d1:fb:75:b0:94:06:b7:68:fb:14:35:1b:5e:
                    2a:a3:11:de:22:80:61:8f:76:ea:01:68:45:58:a2:
                    43:78:c8:ff:20:dd:61:c4:5b:2b:b2:77:43:9a:c5:
                    81:7b:86:62:97:c7:0c:22:f6:20:21:56:1c:f1:51:
                    50:78:42:1a:11:13:46:89:19:90:86:4a:e9:09:3b:
                    94:74:df:ce:b9:f2:42:9d:c4:91:64:c5:eb:ef:3d:
                    66:a9:a0:cb:fa:78:d5:dc:24:1c:ff:3b:64:77:93:
                    8c:94:6d:ad:73:50:02:ff:19:eb:2e:2e:8a:de:49:
                    23:6b:ed:cc:97:8c:df:52:0b:0a:7a:0e:db:fd:74:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:6B:D2:89:A0:A4:C8:13:55:29:DF:3B:C1:6E:D2:5B:DA:9D:A1
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:88:6c:1e:23:ff:69:78:d2:bf:95:6e:e9:7f:b3:a1:6f:
         73:4b:29:b7:0e:ad:b8:14:e5:5b:0d:1a:3b:30:ae:82:57:2d:
         76:47:3e:b0:ee:5a:f7:57:84:e7:98:30:ec:55:93:43:af:21:
         b8:bc:91:b6:37:b1:d2:58:d6:11:4b:dc:b9:48:d4:9c:a0:45:
         30:8f:84:15:c6:d5:6a:cb:68:71:f2:61:62:cc:2f:39:1e:55:
         c8:76:f4:21:34:59:9f:33:f5:2a:6f:ac:90:b7:fc:d6:ef:c5:
         78:38:5f:5d:df:70:60:60:54:24:f2:96:1e:ed:3f:6e:d5:64:
         88:75:47:68:2a:34:d6:89:a7:f6:fe:9c:8b:21:7c:62:01:0c:
         f7:c5:01:be:4e:cd:2a:6e:d5:22:fb:13:9b:23:ad:fd:3f:05:
         7b:9d:fc:11:8c:8a:ae:dd:07:89:b1:40:8f:f4:4e:09:ab:21:
         58:d1:e0:82:af:59:7e:d0:d0:e1:a9:25:70:b0:ed:94:09:81:
         c9:6a:6a:d2:ba:9f:ba:44:b4:ae:c0:d8:81:3f:c0:23:14:98:
         c0:1d:ed:5a:4f:97:93:e1:e9:f7:1c:c4:49:c4:11:00:b1:9e:
         07:b0:f9:44:1a:e5:64:dc:cb:9d:2e:f6:dd:f2:10:98:45:bf:
         52:33:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----