Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          OHbXGO4EQfzrdc2t1wqq35B3utob8v8TcTpsRmPryzo=
Subject key identifier:   14:54:CA:EE:EF:62:B9:4F:DE:5D:72:4F:6D:1D:40:81:0A:71:F7:1C
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       01962E9937259F5706C16C0CEF66BC3E21A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          0492
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: eEtYlLt8nApfOpGifpY98iHYli/y1nP3IOvqOIp3kus=)
                          2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:37:25:9f:57:06:c1:6c:0c:ef:66:bc:3e:21:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=1454caeeef62b94fde5d724f6d1d40810a71f71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:49:b8:c0:52:de:bc:10:aa:f1:46:fc:c3:
                    c2:ae:33:b0:e1:b1:08:f4:6f:23:6f:55:fb:95:7f:
                    be:f0:a1:9a:a6:a7:dc:e9:72:79:18:47:fe:87:a3:
                    47:50:d4:49:2b:7e:9d:e4:3b:40:54:9c:e0:cc:c6:
                    54:72:96:74:26:1c:d0:49:a1:11:1d:9f:01:d6:58:
                    e9:4c:93:3e:e5:01:95:f5:d4:b6:9b:b5:17:6d:68:
                    29:b1:ee:4f:a9:00:1f:0e:42:1d:2f:31:ff:a9:0c:
                    62:95:cd:6d:f6:12:63:e0:23:f3:a6:36:46:35:8d:
                    70:ed:d2:43:f9:e4:20:1e:50:6a:33:93:40:be:29:
                    3e:45:0d:f1:40:55:1e:62:4b:7c:6d:f1:79:f6:a8:
                    5d:4e:be:24:70:a0:a7:78:c2:98:02:4f:d2:8a:44:
                    65:63:16:bc:7b:d6:9a:29:72:a1:a9:52:2b:80:7f:
                    ba:84:f1:a2:6f:13:d2:d9:f6:9c:3a:23:12:98:1d:
                    0b:96:82:4c:3c:93:1a:1e:5c:b2:3e:59:46:8e:ca:
                    6f:cf:2c:c8:33:76:8b:9c:b1:bd:0a:7d:87:9e:d8:
                    da:13:dc:21:f1:72:e6:f6:e8:32:7f:bf:9f:db:54:
                    85:1f:c3:81:92:1e:86:c5:e2:a1:4b:b3:3c:41:e7:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:54:CA:EE:EF:62:B9:4F:DE:5D:72:4F:6D:1D:40:81:0A:71:F7:1C
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:c9:0a:91:be:3f:00:24:8a:e9:da:4c:8b:da:86:91:bd:
         45:85:9f:9e:ff:d0:56:a0:b9:ea:84:62:9b:07:25:b7:6f:e4:
         dc:2f:f1:36:75:03:82:20:8a:da:56:52:2c:e8:fd:2f:dc:b0:
         7f:63:77:f2:f0:91:33:63:48:2a:f8:67:fc:53:5c:24:96:d3:
         b2:97:47:91:10:1f:f7:34:98:5a:a9:60:88:b8:a6:d5:85:17:
         0f:73:5c:c7:dd:b8:e9:48:41:83:9a:44:26:24:97:58:e3:02:
         6d:eb:ed:ca:b1:65:64:8e:6e:16:40:8e:37:1d:ff:84:e0:ae:
         b4:b5:d8:8d:ec:46:38:e1:ea:4d:8d:f2:37:32:bb:ed:81:d1:
         ec:5d:21:1a:86:70:3c:35:d1:25:c4:76:c2:fa:5b:7e:f9:63:
         6f:8c:6d:af:a5:87:6d:b7:35:3c:55:94:ac:8e:9e:f0:4c:b2:
         63:d8:cf:18:be:b5:d7:57:d5:f8:06:62:9d:b4:05:f9:a8:22:
         ba:13:d5:ba:b8:66:98:0d:13:38:80:17:fc:cf:45:ff:5b:38:
         83:c4:ee:f1:56:16:2a:3a:66:42:36:ee:b4:58:4d:44:19:97:
         44:3d:82:6a:07:71:23:9e:4b:80:bf:f2:74:05:33:d0:a9:f9:
         a0:d9:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----