Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File:                     5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier:          ZhfTP10emNAxTBN6pgORid6Xko+CGkXSkyQnEGT99aU=
Subject key identifier:   D1:8F:1A:E1:AD:84:E8:D9:C9:18:AE:66:91:99:B5:30:60:12:13:A1
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer:       /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial:       01962F3DB2AED0277420F97BF74F7F459681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number:          10E2
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: nPmGOMfIkxsK00kbp2vS5GasMY7T/E0KxhXn2J9WrRo=)
                          2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b2:ae:d0:27:74:20:f9:7b:f7:4f:7f:45:96:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=d18f1ae1ad84e8d9c918ae669199b530601213a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:01:78:f5:6f:bb:49:80:0b:e0:dd:7e:f4:
                    d9:84:11:d9:ba:4e:f1:52:b4:e4:95:c5:3a:02:c6:
                    9d:5c:0e:4d:11:1d:44:4d:3d:b3:0c:a5:1c:0c:c3:
                    fa:3a:c4:fc:3a:df:01:fb:f0:a2:36:12:bf:e6:8f:
                    ba:29:37:16:0e:a9:2d:ee:0d:b9:11:36:1c:2a:fd:
                    12:a2:ca:13:dc:87:a6:a8:ea:51:66:73:2c:4b:ff:
                    5d:34:e0:1b:a7:97:0b:e8:dd:fb:12:a2:24:88:4d:
                    0e:a2:d7:dd:26:6f:54:04:45:98:e3:f3:e8:47:0a:
                    11:de:ce:ff:f6:4b:b7:9c:d6:eb:59:ae:54:e0:24:
                    96:21:f0:6c:84:a6:30:59:8e:8a:2e:79:3c:6f:e4:
                    18:92:bc:14:bd:56:96:fb:c5:74:2d:09:86:ce:9d:
                    15:de:89:6f:90:6f:e1:10:45:81:e9:2b:25:b4:99:
                    ad:51:21:af:ae:ad:b6:00:6a:54:f2:ec:9a:06:e7:
                    72:c3:0e:31:b7:b1:44:e1:c4:ac:c3:75:76:0e:fa:
                    07:39:d8:96:1b:40:f6:c4:9a:5f:75:27:52:73:a0:
                    e1:09:8b:b4:92:4a:d1:a0:89:c9:f3:1d:94:6a:a5:
                    cb:eb:85:ac:52:0c:b1:82:29:9f:c2:7d:70:3a:57:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8F:1A:E1:AD:84:E8:D9:C9:18:AE:66:91:99:B5:30:60:12:13:A1
            X509v3 Authority Key Identifier:
                keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:00:82:8e:b5:f4:39:f8:7d:e3:84:66:30:d0:bc:d4:3f:
         49:a3:71:50:79:a1:f6:63:87:fe:2c:9d:2a:ad:46:71:e6:91:
         71:c1:1e:e9:2e:7a:6a:e9:38:e6:37:74:2b:79:84:12:a6:91:
         a2:bd:81:14:5a:78:61:a9:a6:cc:43:06:7c:1b:7f:38:68:ba:
         8b:b4:35:24:9d:65:40:53:00:3d:5f:66:77:9d:75:4b:db:d3:
         b5:41:d8:54:00:4b:cb:9d:17:18:d2:fc:8a:d4:4d:12:89:9f:
         ee:fa:a3:ee:9e:8c:34:6e:2c:07:05:17:e6:5e:23:d6:23:95:
         99:21:da:87:02:e4:2a:be:c5:35:db:3e:a3:1f:a6:2b:13:30:
         c4:63:ee:d5:d3:1e:88:d0:27:70:ec:b5:b9:c0:4d:e5:eb:f9:
         07:42:bc:66:28:42:c1:3b:0f:d4:ba:97:0d:c5:0b:84:6f:8e:
         22:51:26:a8:21:14:7c:14:fa:2c:c8:db:83:7c:69:1d:8f:55:
         81:86:9b:fb:97:03:9f:85:ca:0c:51:fd:4a:05:2c:01:36:4e:
         ac:18:2e:ee:26:35:b9:d2:3b:c0:34:90:cf:60:4c:55:89:f5:
         74:30:21:02:f5:e2:34:cf:be:01:bb:f5:e9:30:7f:d4:21:43:
         60:cf:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----