Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File:                     5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier:          xk7hGsC7c4u2iapStPbuda33qe02Ryee2g3IUArNJ4w=
Subject key identifier:   40:94:47:E7:4A:37:7F:67:8F:2D:07:E4:53:25:05:19:96:D6:E8:ED
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer:       /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial:       01962DF43ADFE2408E7F1B3A9D621018AF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number:          095A
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
                          2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: bfxg9+4LNdBpv0BbHYfdlWwSlVyl2DgxtEKLcqknlTs=)
                          3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3a:df:e2:40:8e:7f:1b:3a:9d:62:10:18:af:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=409447e74a377f678f2d07e45325051996d6e8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:6e:76:15:c0:22:c9:58:91:ec:92:64:53:
                    1b:e6:45:79:d4:7d:e9:18:14:f7:25:67:d0:1e:10:
                    6e:6d:e3:24:0b:9b:f9:9f:0f:14:de:10:25:4a:d5:
                    82:73:1d:84:28:f0:d4:b4:e4:0c:bc:7a:3c:f2:93:
                    a8:a7:84:d0:84:45:93:85:e3:d7:c5:e2:e1:e7:75:
                    7c:be:79:98:e9:e7:d8:97:3d:3d:cb:bf:82:65:63:
                    05:be:9d:12:27:a1:6c:38:c2:e8:eb:a4:78:c8:1f:
                    bc:fe:5e:c1:39:85:c0:23:c7:3a:4d:e3:84:6b:a8:
                    53:3f:51:05:ff:46:eb:63:d1:d3:87:0a:44:e9:c2:
                    3b:1b:99:90:5e:38:71:47:10:33:89:ca:35:73:35:
                    9c:27:f3:c0:2c:fe:1a:1e:a9:4b:72:06:89:f5:9b:
                    ae:0f:6e:93:6d:36:66:c0:d4:95:74:3b:6e:a1:77:
                    91:d0:b1:ec:a8:a9:e9:09:12:1b:1e:83:e4:78:a9:
                    09:8b:c8:a0:98:87:69:b4:8b:9c:bc:bc:7e:10:72:
                    cf:16:bf:54:ab:36:10:68:f2:18:b6:ea:3a:fa:55:
                    63:c5:f7:40:05:0e:c4:ac:29:3f:93:7f:6e:db:22:
                    2e:e1:c3:a1:e4:4c:ce:c7:02:59:0c:53:4a:6b:9f:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:47:E7:4A:37:7F:67:8F:2D:07:E4:53:25:05:19:96:D6:E8:ED
            X509v3 Authority Key Identifier:
                keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:67:99:7b:fe:f3:28:65:2f:d8:92:63:4d:0a:b0:bd:1e:0f:
         c8:12:1e:75:dd:28:e2:12:7a:2f:3d:2a:28:d6:02:fe:32:9a:
         f9:2d:f5:86:80:c5:88:5d:97:0e:c0:13:b6:02:f7:75:59:fa:
         1a:4f:e4:b0:9e:0a:f6:63:d8:e3:70:7a:81:8c:33:17:6f:a9:
         2c:49:28:e8:69:da:db:11:0a:13:5f:0f:e1:f9:49:db:d8:98:
         8f:19:35:c8:87:3f:16:1d:b5:e9:2d:b7:db:44:b0:b6:ee:3f:
         af:41:06:19:81:40:70:b2:c0:59:78:f0:99:0e:15:72:1b:b1:
         1a:be:c8:20:d7:ca:84:b2:c5:91:49:66:28:3a:ca:a7:8e:97:
         da:3b:2a:54:64:7b:c3:03:94:70:25:21:3e:8e:87:0b:6b:a5:
         18:2d:da:8a:fd:0c:58:ef:24:2d:63:0d:6d:ea:c7:d8:92:4d:
         09:3b:43:52:96:aa:ca:c9:3b:bc:60:ac:3d:5a:0c:77:1c:91:
         60:d5:13:18:d7:38:45:e7:55:bb:f0:a0:93:26:00:99:b7:fd:
         5e:09:64:cd:1e:c7:21:9c:2e:bc:4f:e7:dd:b5:b6:fa:a6:e4:
         63:1d:4c:28:50:8c:2e:46:bc:51:62:e6:7b:03:af:c2:6e:da:
         04:07:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----