Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          SMRjAhWWqUIFH107J3vvjBGVKHiGOPD1BCwhzu2gayc=
Subject key identifier:   C2:4B:5E:9F:ED:88:BA:97:47:5C:92:A6:38:18:86:E2:A3:81:34:DB
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       01962E61985E87B93BF37CB6BF0B4899FC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          110D
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: gJt7TG5EjyucMdeXVwtMduM2XnAge1jqQuaxqOclq5U=)
                          3: 9F7dZYjOPi3rs5NLZXUfov8PBWU.roa (hash: j/9WP0wPl17yaC72aPiHSbkKMZUDz6oycbmdGLPUu6A=)
                          4: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          5: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
                          6: jt3uxkc0nzbTvWbsX7a361YE_o0.roa (hash: DdTJIeWIH2giv5XExuVH/S2lYFHAruTpFnXLNoUPjwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:98:5e:87:b9:3b:f3:7c:b6:bf:0b:48:99:fc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=c24b5e9fed88ba97475c92a6381886e2a38134db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:77:29:8b:54:62:64:b8:f5:1c:82:69:1e:
                    e1:1b:9f:f9:fb:eb:8a:12:c9:d1:53:b9:74:cc:d3:
                    b8:ae:41:66:c5:2b:d1:aa:fe:b1:fe:3d:b6:cf:82:
                    1e:a4:70:4a:7c:3c:c6:da:36:43:b3:89:4f:fc:b8:
                    2c:0c:b6:0c:a6:e5:4e:f0:95:55:0a:09:fe:59:01:
                    ed:0c:8e:76:09:d5:8d:0f:0b:a7:a0:43:1c:3b:20:
                    91:9d:5c:cb:be:0e:7f:d0:59:cc:58:68:c7:de:8c:
                    83:6e:35:5b:a7:6c:2a:d5:44:1f:ff:ef:6c:d8:0b:
                    be:16:1f:94:2d:39:c6:e7:0c:c2:de:b4:c9:3f:d9:
                    30:f4:6c:f5:b3:9b:bc:7a:f3:58:34:c5:0d:84:3c:
                    12:61:6d:b6:1d:1b:c0:46:00:9a:f5:48:cb:c8:20:
                    36:33:4b:d7:d2:b4:c3:bf:77:2b:04:05:7b:13:23:
                    82:a1:95:a0:73:4e:dd:30:49:42:5c:fc:9d:92:1b:
                    4b:e5:06:2b:74:66:20:c6:fa:3c:c7:a3:56:69:14:
                    82:9d:00:fe:bf:29:64:fc:66:71:14:40:fe:4d:61:
                    21:95:8c:96:02:90:6a:b7:25:10:b9:d4:23:c5:10:
                    77:bb:0a:8f:0d:21:1a:a3:6d:55:0b:c2:94:30:70:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:5E:9F:ED:88:BA:97:47:5C:92:A6:38:18:86:E2:A3:81:34:DB
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:45:e7:15:b9:ba:90:2e:a1:6a:0c:6e:0e:de:da:14:b9:3e:
         f7:58:59:b8:e5:1e:00:f9:2b:62:00:b1:26:28:e2:15:67:f3:
         56:d0:b3:11:b0:22:d6:2d:b0:01:1b:78:79:61:87:ca:8d:3b:
         43:01:fd:c6:43:12:4d:19:8e:06:2a:a8:93:ed:70:02:58:ac:
         c4:34:52:e5:0f:3d:62:31:8a:62:17:20:df:13:18:0f:93:9e:
         a0:1a:84:29:e5:5c:49:15:cf:54:89:86:52:94:49:81:47:44:
         dc:34:d3:db:05:d9:83:7b:3b:84:c5:21:6c:86:a4:93:f9:8b:
         fa:43:cb:a7:99:34:6e:76:e4:c7:6c:81:5d:b2:a2:78:7c:c5:
         ee:de:b1:d9:14:f3:3b:a5:24:a0:b7:5d:d9:23:b7:a3:4c:ca:
         dd:82:2b:9f:2a:36:31:05:bb:92:97:ca:29:9f:8b:6d:1c:a1:
         20:3e:55:1d:d3:77:66:03:b0:f8:18:3e:33:3a:35:5b:b7:d2:
         5c:d5:bb:34:60:98:89:84:85:9e:27:71:20:76:cf:9b:7c:78:
         8d:5e:a8:ba:f1:17:87:2b:32:94:42:9d:c1:f9:e4:a2:99:a2:
         c1:8e:7b:17:fc:c4:38:e8:a6:30:df:43:fa:59:93:03:ce:e7:
         93:66:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----