Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          bpmvKmIq7G2QodorViuakQHMxP9gSwmhkC/c2aXLx80=
Subject key identifier:   61:84:53:B6:7D:CC:86:C6:49:FF:49:CE:4B:66:7A:6C:3D:5B:74:BA
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       01962F7462D7369AB2F0B3515DB4BACD647B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          1468
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 0O2fJ10Q2U7+/00K8QPTzI0IIf6wtkgkswti5H/BKv8=)
                          2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:62:d7:36:9a:b2:f0:b3:51:5d:b4:ba:cd:64:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=618453b67dcc86c649ff49ce4b667a6c3d5b74ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:fc:41:7e:27:03:82:81:fe:d7:d3:ee:60:
                    ab:4b:ac:da:c7:8e:37:e4:1e:25:2a:b7:2b:d5:f0:
                    bb:dd:e5:09:f0:f5:19:83:b0:6f:2d:c0:f6:22:d2:
                    09:4c:a2:a8:c8:99:41:c9:cb:61:3e:0c:c2:6f:8e:
                    c2:1c:13:f0:a7:54:47:25:b7:af:c2:63:41:c4:67:
                    63:4c:2e:a1:e6:09:f6:4b:1d:8d:8e:14:e1:b7:b2:
                    66:7d:6d:05:7b:94:80:95:53:b3:8a:6b:b1:56:80:
                    50:26:fb:ac:d6:86:74:89:0e:ad:b4:86:19:9b:f8:
                    4f:96:39:a4:1d:3a:63:60:03:06:3f:8f:f7:72:a3:
                    4a:5b:68:f3:f6:18:d4:97:e2:fd:75:2e:b8:cd:08:
                    45:74:b2:bf:01:45:b3:cb:b2:72:fd:e5:d4:7c:b0:
                    ce:7a:6e:8e:3e:84:4e:73:89:39:b7:be:48:83:87:
                    08:c7:8d:48:8f:be:77:1e:9d:d4:38:77:71:21:f6:
                    af:02:65:4b:9e:f3:e7:78:26:d7:dd:c2:9f:9e:a6:
                    0f:a5:dc:c6:7c:9f:6b:68:e0:b3:b5:82:62:0c:1b:
                    ce:0f:a5:f8:b8:81:06:bc:da:5e:29:87:78:bf:58:
                    2e:85:ff:12:9e:91:94:ff:1c:96:2b:99:d1:0d:53:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:53:B6:7D:CC:86:C6:49:FF:49:CE:4B:66:7A:6C:3D:5B:74:BA
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:da:ad:20:b9:66:73:fd:4e:c4:1d:21:be:e9:5a:0d:4a:
         a0:45:6a:5b:06:50:d7:b9:9d:68:32:6d:df:10:f4:18:e9:bd:
         d2:3d:e3:d1:d4:27:aa:a5:c3:f5:4d:e4:ea:35:3f:27:1a:27:
         be:73:7c:cf:ff:93:82:15:5b:25:dc:45:a8:84:90:7e:1d:25:
         d7:86:a3:f8:d9:f4:93:50:8d:03:fd:16:79:f7:c7:30:5c:82:
         d5:64:a3:77:be:75:03:75:b2:6f:97:dd:5e:22:b8:02:09:56:
         05:3a:4c:1a:69:e9:fe:78:d3:80:3a:4d:6f:94:d0:62:56:9a:
         06:08:15:eb:51:97:35:07:2f:c3:86:ee:40:07:37:ce:45:80:
         71:2f:85:3e:b9:7b:ec:a8:8f:c3:c5:0d:c0:a3:9a:0d:d9:c3:
         8a:73:aa:c9:e5:e8:33:69:36:f5:aa:62:a8:23:fc:40:19:f6:
         20:ac:f8:79:4d:a2:bb:c7:d3:17:4e:72:ad:f5:dc:09:ec:d2:
         98:e9:3e:19:d5:51:2f:e3:7a:63:27:f3:65:a9:99:3b:d1:8a:
         b2:49:09:ca:a6:fc:00:5a:61:ba:74:a3:11:d3:f6:dd:09:b8:
         37:f7:0a:eb:69:13:25:46:fd:aa:d1:65:00:be:2b:77:9a:a4:
         67:bf:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----