Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File:                     J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier:          z3VxDZPdfG6epmXBolcJVx0vPgrYFj5R+xHJHNPjmRY=
Subject key identifier:   5E:44:D1:2B:A5:D4:96:A7:3A:1A:25:91:8A:6A:A3:DC:5D:66:54:E7
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer:       /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial:       01962FAB52453DBE0EFA5844D07C058EAC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number:          100C
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: 7cVSjLu9bk6o+S3x1z6pLkSw6YrccMlQLVZN0FtxSo0=)
                          2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
                          3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:45:3d:be:0e:fa:58:44:d0:7c:05:8e:ac:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=5e44d12ba5d496a73a1a25918a6aa3dc5d6654e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:e8:2c:45:22:0f:64:14:e5:63:32:f0:fb:
                    1e:da:68:32:58:bc:37:93:f9:b3:ab:79:ae:50:87:
                    c6:5d:97:a7:96:3e:4e:e3:20:fe:5d:3d:e8:fc:8f:
                    77:22:6a:99:7a:09:fb:6f:15:45:16:62:20:2a:c0:
                    26:61:57:54:8d:38:3f:61:1c:64:8c:6f:8f:dd:69:
                    d3:bc:9b:30:fa:8a:2c:90:d7:2e:41:65:18:25:36:
                    f0:60:0a:4d:5a:6c:80:be:c6:6b:07:c4:0d:4b:64:
                    8b:3c:59:1e:f9:ee:be:d6:7c:1a:37:ec:06:3f:f3:
                    67:df:50:9a:45:30:22:b7:43:c6:50:59:f4:59:47:
                    41:a9:18:e7:34:b1:ac:86:c3:78:07:17:f8:cc:ed:
                    a6:13:96:fc:a8:38:c6:1e:92:34:31:f4:f1:24:50:
                    e4:83:85:86:68:1a:1f:d7:36:82:55:95:6d:28:32:
                    3e:46:2f:84:85:9b:78:1a:83:2b:5c:21:95:27:ed:
                    a4:cf:7d:5f:ed:46:85:1a:b8:b4:dd:94:d3:ec:c5:
                    0f:d7:e9:57:25:6d:d6:7f:1a:79:fc:1a:62:67:c5:
                    3d:49:46:01:ea:2b:1d:32:c2:3a:d0:a4:9a:c5:b3:
                    09:55:1c:f3:c4:11:63:4d:79:9e:75:fd:63:54:b4:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:44:D1:2B:A5:D4:96:A7:3A:1A:25:91:8A:6A:A3:DC:5D:66:54:E7
            X509v3 Authority Key Identifier:
                keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:a2:bb:b0:5d:60:75:06:76:00:c0:e9:ae:c1:4f:4e:1d:
         f6:c0:d1:bb:e0:d9:a8:f0:9e:15:f8:73:84:ff:73:e8:e9:ad:
         43:fd:4a:78:ec:e3:da:c1:73:47:09:20:06:d3:50:f4:63:78:
         e6:96:4c:fe:a6:d4:4a:87:1e:33:08:f7:d5:6c:d4:2c:e4:14:
         0b:11:47:e6:40:6e:7a:d0:04:33:c8:c9:89:60:ad:d7:9a:36:
         97:04:2b:53:a9:67:93:72:25:98:36:25:96:e9:93:47:6e:e9:
         96:9f:fe:40:24:d2:7f:9b:81:d7:a8:e6:ff:04:b2:3c:7a:e3:
         9b:e1:68:0b:07:aa:9b:fe:59:58:58:1c:5f:75:6f:d3:9e:7f:
         70:f0:a5:28:af:9d:f5:a4:d9:83:71:e4:51:ab:b4:7d:6f:45:
         b4:ab:b8:3d:50:5c:98:dc:a4:9f:3e:4d:2f:76:b7:9a:a5:53:
         4e:20:fa:38:fa:f2:ea:33:81:f1:2b:b8:c6:fc:44:b2:2b:c5:
         70:0f:59:75:a7:83:09:be:a8:76:81:e1:53:2d:bc:3b:84:60:
         6b:4a:98:06:80:c2:4d:d1:34:ed:14:9a:e0:2a:2f:97:8d:75:
         10:e7:28:7b:0a:73:9e:fa:b5:51:a4:0c:62:8e:69:04:24:1c:
         a6:ac:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----