Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File:                     5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier:          GCPT34vws+taadAFChaOIzLLsMHOnrCkxpfLaCI3qco=
Subject key identifier:   F1:D2:C8:DF:C2:52:59:08:CA:58:6E:F5:38:AC:18:BC:37:6C:FF:CD
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer:       /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial:       01962DF3A355CE4626142A054B0BCF234A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number:          0A0C
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: chzEcsqOh9qlB7qMDHybx4iI9AC9176SkfY7aa7dpQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:55:ce:46:26:14:2a:05:4b:0b:cf:23:4a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=f1d2c8dfc2525908ca586ef538ac18bc376cffcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:a8:50:b7:4f:96:b6:f0:b8:73:e4:6e:70:
                    2d:52:b8:6b:79:50:b1:a1:b4:b0:a4:bb:73:51:18:
                    ec:e2:4c:2d:6c:d7:65:26:de:77:54:ba:1f:60:f5:
                    29:3a:6a:2c:e6:60:68:f5:20:12:a7:41:73:47:16:
                    28:66:97:5d:b8:12:c6:aa:ca:5b:8d:9a:6a:59:07:
                    03:da:0a:4b:08:99:6d:58:c9:8a:5c:ad:bd:f8:81:
                    61:c8:7b:41:ac:63:d3:7e:00:9b:b7:57:2d:bd:c3:
                    f3:84:3c:6c:08:1b:03:55:62:e0:de:25:ac:3e:76:
                    99:7f:1d:3e:8d:17:f6:b4:93:31:9c:96:da:d2:41:
                    7b:cc:90:94:03:0f:4a:10:85:05:43:61:7f:9e:1b:
                    bf:96:cd:b3:ac:5b:27:72:de:7c:1a:bd:5f:73:8c:
                    13:00:79:da:97:39:37:32:f7:41:8c:3e:61:3e:4e:
                    33:f2:1e:f0:bf:37:ad:d7:b4:07:cf:1e:d4:85:c2:
                    4e:af:1c:e5:f2:f7:71:84:cf:28:b1:d8:6c:2f:4c:
                    f9:01:73:b0:fe:66:d1:73:cc:e6:bd:c5:15:0e:45:
                    8a:85:c5:cd:09:86:96:7c:84:53:62:5e:38:a2:65:
                    e9:28:7c:f1:a9:40:a5:33:ee:a6:1c:11:5e:f2:b3:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:C8:DF:C2:52:59:08:CA:58:6E:F5:38:AC:18:BC:37:6C:FF:CD
            X509v3 Authority Key Identifier:
                keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:09:26:41:d7:57:83:c1:18:a1:bf:4b:28:da:57:86:4c:ff:
         f9:dc:dd:09:3c:94:2d:54:ab:dd:1c:c2:ea:b0:c3:36:0a:21:
         e6:70:73:6d:d1:1e:99:c1:85:37:b7:0c:70:8e:b0:7b:70:49:
         93:32:a6:1d:0d:77:ab:b0:cd:5f:71:9f:bd:ec:d2:1d:b8:ae:
         56:49:e6:fd:ed:1b:73:62:67:16:6f:62:e7:ce:95:5a:bc:45:
         32:dc:36:1b:23:4a:1a:b3:ae:23:15:ef:b4:07:ca:e5:04:96:
         8d:94:9b:7f:31:85:8a:3a:60:0a:17:4e:9a:fd:f9:b2:15:fc:
         8a:45:db:64:f8:6c:52:5d:a3:e8:86:72:9e:54:e3:be:f0:f7:
         0e:da:41:22:51:1d:36:c5:06:d0:ff:66:16:85:61:4c:19:c7:
         14:ad:9e:20:bd:72:e8:a0:17:cf:c9:ed:ff:9b:1f:02:41:32:
         7d:58:77:a3:44:18:c8:c2:37:1e:ad:31:c4:1b:77:97:58:aa:
         8c:66:04:18:78:6b:00:15:94:58:95:6c:84:84:c2:f6:9d:df:
         b8:0d:26:4c:ab:45:2a:90:41:a9:45:24:ef:3d:a0:8b:d9:8e:
         ee:78:5a:86:d5:a8:b7:95:6c:14:8b:c4:b0:08:3f:74:a1:88:
         ac:e9:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----