Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File:                     h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier:          VTZ85H4xiubq0OsXZHolSmjgzorn6QAAcuH3CIKu9t0=
Subject key identifier:   E6:DF:F5:5A:74:C2:19:FC:FC:30:79:63:8C:3B:58:C2:A0:A3:48:29
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer:       /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial:       01962E9988888E1C6A8733D65FF18DFA8844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number:          036E
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
                          2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: 6RKEqcYLzVhk7Jc9U+ff88wq1Jee/6DJTDUprM1DyrQ=)
                          3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:88:88:8e:1c:6a:87:33:d6:5f:f1:8d:fa:88:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=e6dff55a74c219fcfc3079638c3b58c2a0a34829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:66:15:12:4a:77:a8:b7:a7:00:e8:1f:5b:
                    35:ff:57:9a:66:d0:5b:9b:1f:c1:37:18:40:38:a8:
                    0b:80:4c:e3:5e:41:9b:a6:19:c1:a1:75:48:0e:e0:
                    b3:97:40:af:6c:41:ec:d5:02:6f:d3:88:d3:18:a7:
                    11:09:f0:ed:9b:cb:0c:08:d3:0b:06:6d:e1:ca:86:
                    8a:fb:53:2b:a6:6a:6d:6f:79:bc:28:06:7c:de:cf:
                    89:6d:8c:3e:17:e5:6e:e6:c4:c7:00:ab:5f:20:0c:
                    25:c6:55:02:31:3e:a4:e9:f0:34:6c:c4:e9:3a:92:
                    58:ef:a4:86:ba:99:bf:45:39:a7:0c:85:94:12:11:
                    f2:0f:8d:5b:b3:ee:86:70:e9:46:81:49:28:b2:6c:
                    14:5c:72:1c:07:bd:a2:94:45:d2:bc:ea:25:8c:e6:
                    12:0d:75:c4:6e:0d:3b:61:c7:26:98:0e:e9:7c:b2:
                    6b:8c:0d:2b:72:5b:ff:a0:47:9f:21:ad:ea:ed:0c:
                    1e:7f:11:8b:92:eb:4b:44:04:62:ba:71:28:42:7d:
                    dc:ac:67:0c:b8:22:f1:07:a2:df:1b:25:72:6f:8b:
                    6f:bf:ad:5b:7b:ee:48:ea:55:3a:a9:d8:1c:e5:47:
                    d6:48:48:f4:c9:6b:26:64:e1:b6:27:4f:0a:28:eb:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DF:F5:5A:74:C2:19:FC:FC:30:79:63:8C:3B:58:C2:A0:A3:48:29
            X509v3 Authority Key Identifier:
                keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:69:37:aa:85:88:c5:4a:46:aa:02:60:c3:9a:8b:f5:73:f7:
         5a:3a:17:3a:61:58:7c:9b:96:dd:b8:6d:b6:be:d1:95:7a:c5:
         8c:bd:de:0a:c9:00:d2:8f:81:d8:00:f1:82:fe:58:cf:03:b2:
         d4:bd:02:1f:d0:9b:ed:3c:fd:59:ba:0d:a6:90:35:e9:10:7c:
         40:1f:51:51:2e:25:de:fe:e2:07:7b:56:79:7c:41:ea:28:46:
         a5:1c:73:ea:cf:0f:fb:74:dc:73:30:81:10:1b:68:94:c1:18:
         d6:db:d9:3a:2c:4d:c6:72:73:fa:3b:0b:aa:37:05:c7:7e:48:
         5f:3c:44:65:30:42:78:d2:a6:d8:32:10:76:ca:02:9e:9c:c1:
         fb:95:3e:cc:8b:26:6f:18:f9:3b:75:a1:94:35:1b:7d:dc:79:
         d5:27:60:06:60:47:c1:1e:23:f9:1c:a6:a0:51:87:af:71:82:
         0f:97:82:e9:e7:73:28:a9:13:74:0f:1f:b4:e2:0b:ae:ce:7f:
         a4:8d:5b:1b:12:bc:9f:13:98:b0:48:0b:df:99:84:1e:4e:41:
         ac:ee:ba:29:0f:90:6c:db:0c:95:e5:6c:c5:f4:27:30:e4:f6:
         64:6e:ec:55:36:43:71:a0:04:68:26:d9:92:a6:39:1d:fb:99:
         01:73:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----