Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          mTfTYh7Qwuz0o0Kc9akK+Tx1nWa9SSwb8UHFzPB3h6A=
Subject key identifier:   73:82:AB:8A:23:9B:D3:13:C0:51:BA:6B:4F:4C:62:4C:17:84:6C:CF
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       01962F74EBC29971BB706246FEB6CAF4816E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: yZ9y4iqLnRrOXqnutNxzT+HeUgbaVvb9kM6oVIRPA60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:eb:c2:99:71:bb:70:62:46:fe:b6:ca:f4:81:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=7382ab8a239bd313c051ba6b4f4c624c17846ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:25:10:1e:0d:70:c8:3c:b5:5e:62:4e:5f:
                    9a:50:46:81:ee:4e:e5:31:7b:f2:c7:be:20:e0:42:
                    d3:82:ac:0e:cd:8b:28:5a:03:d6:b6:e7:e6:7d:bc:
                    a9:e9:61:c2:44:53:2a:7c:23:a4:e8:29:17:b7:2e:
                    1b:bc:94:ea:31:36:cb:08:e2:23:40:ac:11:70:39:
                    16:14:bb:59:b2:38:32:de:c8:7f:4a:e6:d8:34:0c:
                    9c:70:c8:7c:8c:4b:05:b9:ea:42:ad:07:0f:9b:37:
                    0a:08:c8:c9:02:8b:8f:02:ba:72:df:ef:e4:f8:d9:
                    bb:e4:ea:cd:34:4d:d1:57:85:eb:15:61:02:70:0e:
                    82:1c:ee:2a:c0:0c:5b:06:50:59:24:0c:2a:74:72:
                    f5:91:dd:a0:ad:f2:04:11:ec:1a:61:db:55:6a:99:
                    e6:da:63:d2:eb:14:89:a2:aa:d4:e0:b4:f2:54:2b:
                    b5:42:47:3a:02:f0:06:53:d6:7a:d0:88:9d:c9:91:
                    52:e4:05:46:64:02:94:17:50:ee:19:4a:06:bb:40:
                    31:0f:66:81:02:2c:c1:0d:18:7a:37:04:dd:3c:37:
                    03:f0:b6:4a:a1:4e:b7:cd:6b:ad:79:e8:e8:52:b2:
                    2f:ab:b3:0e:63:22:48:d2:ea:eb:81:09:36:24:cc:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:AB:8A:23:9B:D3:13:C0:51:BA:6B:4F:4C:62:4C:17:84:6C:CF
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f1:26:92:7f:b8:f5:17:58:db:9a:18:db:a8:71:40:12:a8:
         70:4e:6d:73:d4:60:56:23:3a:ce:a1:62:99:2e:f8:c5:28:53:
         07:c6:e2:47:c6:46:b4:00:9e:2a:da:07:f7:c6:99:e7:1b:78:
         dd:87:81:15:dd:31:56:a1:e0:7d:97:2e:31:ad:bd:92:b9:26:
         da:dc:d7:74:25:df:3a:86:68:a8:83:55:ec:6f:6d:cc:61:f5:
         6f:41:62:14:e8:17:d9:d9:3f:9a:b1:3e:4b:b1:37:07:a0:b9:
         3d:59:95:ef:59:f8:82:e7:0a:77:14:d8:3c:de:98:3f:c4:25:
         7d:d3:d7:d6:ef:bd:53:68:d3:75:a3:e0:43:5f:fe:7a:42:4e:
         f8:a5:6d:2e:39:3f:47:20:1e:94:43:b7:43:69:d3:70:5c:4e:
         59:63:26:f4:a0:1a:0a:fc:92:fd:20:77:9c:d7:1d:d0:a7:32:
         93:ee:35:e3:9d:92:b4:3a:75:66:a3:5f:e9:c3:ac:17:da:eb:
         d2:77:b3:79:8c:a9:72:22:b6:12:fe:fb:ac:f4:73:1a:ec:d5:
         48:08:4b:6c:75:8a:63:cb:05:df:63:e6:24:49:3c:3e:be:17:
         63:be:0d:03:47:c8:7a:0f:35:83:f6:3c:8d:57:e4:16:c0:7e:
         e1:f9:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----