Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
File:                     5llE5PrhnBWib8tfJzL_G6I9NU0.mft (raw, json)
Hash identifier:          8BIr+uEldxSvhvF7D5R2mtreaFGoHwJNJXM3fb7ZGDg=
Subject key identifier:   E3:31:25:97:CD:6F:F3:0E:CE:0F:B9:86:C4:D1:7D:AB:54:C4:E8:82
Authority key identifier: E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D
Certificate issuer:       /CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
Certificate serial:       01962F069E997AE751EC639C90B1958FC717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft
Manifest number:          01A9
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: 5llE5PrhnBWib8tfJzL_G6I9NU0.crl (hash: 2A8Hsq0xS+UZ9ylRT1wmvED0/pIkzcgck6C0yJwrfpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:99:7a:e7:51:ec:63:9c:90:b1:95:8f:c7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65944e4fae19c15a26fcb5f2732ff1ba23d354d
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=e3312597cd6ff30ece0fb986c4d17dab54c4e882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:33:5b:0f:ca:33:55:58:42:51:c1:79:d7:
                    2d:2c:34:ba:bd:38:fc:54:ac:3f:91:ee:46:9c:c1:
                    98:6a:b4:01:eb:1d:52:b7:53:52:0e:f5:2f:45:54:
                    24:58:04:61:c7:ed:d0:93:95:1c:eb:66:b8:f7:ca:
                    7e:1d:30:7e:8f:73:75:ed:9e:51:8f:4f:08:44:c8:
                    4e:e6:c4:95:84:5b:3e:ec:eb:09:aa:a7:d8:ea:5f:
                    63:c2:9e:5e:8d:98:b8:9f:99:4e:c2:c6:1d:a2:e2:
                    af:41:59:67:2d:c2:9e:ce:6e:78:01:a4:8b:10:75:
                    9f:da:3d:69:7e:98:ed:0e:b8:5e:c8:99:5c:71:5b:
                    06:ca:7b:b8:28:29:09:1f:9e:65:af:c8:3f:d7:f2:
                    9d:94:87:95:fe:c0:4e:24:3f:9a:48:ee:32:d1:d4:
                    7b:6a:97:ef:e8:cb:fe:a6:48:84:14:2e:09:57:f3:
                    e6:62:3e:9c:88:d9:d5:2d:f8:80:5b:3f:f2:1d:43:
                    b2:ae:52:8b:38:1c:b3:61:4c:8e:5a:90:7a:77:3e:
                    4f:e6:f5:71:8e:cb:d8:a2:d1:4b:bd:75:46:f5:24:
                    b1:e3:20:0b:1e:ee:26:03:04:f3:2f:5f:bb:a1:fd:
                    e0:8d:e0:75:44:4a:9b:12:ad:ae:34:7a:25:f6:ce:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:25:97:CD:6F:F3:0E:CE:0F:B9:86:C4:D1:7D:AB:54:C4:E8:82
            X509v3 Authority Key Identifier:
                keyid:E6:59:44:E4:FA:E1:9C:15:A2:6F:CB:5F:27:32:FF:1B:A2:3D:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llE5PrhnBWib8tfJzL_G6I9NU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/73da0d-fc82-4572-88d3-698cc7268880/1/5llE5PrhnBWib8tfJzL_G6I9NU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:bf:b6:74:c9:fa:7b:56:dd:e3:d8:76:77:ab:ff:9e:49:
         74:42:44:b8:12:a1:e1:09:2a:22:32:4b:21:83:ef:8d:94:95:
         33:d9:9f:ba:60:ad:31:28:3a:45:a7:3f:e3:b2:9c:57:de:4c:
         85:63:7c:45:a0:47:5a:bd:4f:d3:51:4a:f2:59:1a:e1:82:8f:
         11:4a:7d:bc:57:b8:50:38:04:3f:6d:13:5a:c5:dc:34:02:22:
         95:f5:60:fd:e3:63:d6:0e:8b:98:f3:d1:1f:52:76:97:73:17:
         a7:69:e4:ca:cb:4b:93:0e:b7:cc:94:e7:e9:ac:a8:08:b1:23:
         6f:41:70:19:d3:74:76:51:0c:aa:a6:ed:57:04:63:70:2c:e4:
         4c:79:8a:cf:e5:ee:c2:e3:fe:2b:c1:db:0c:b6:ac:12:96:c6:
         af:38:cf:09:2b:bc:dd:81:71:af:b5:79:72:8c:ab:c8:d2:b4:
         c5:3a:9c:62:e3:4e:ef:af:26:9e:5b:3e:b4:00:d9:cf:b5:ea:
         67:87:e6:33:8b:84:32:73:b6:ca:db:aa:63:2b:be:66:1d:e1:
         de:52:66:b3:29:59:fb:ee:05:55:3b:4d:76:0a:43:27:94:c8:
         b0:f6:ae:5d:a2:9d:6e:3f:26:a5:b9:37:13:33:5f:55:ac:6a:
         66:db:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----