Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          RAQyEhw4fyEDYgruWDWaf7A7/8pRglySWlnAzrftNvw=
Subject key identifier:   FF:BF:43:20:92:37:31:7B:A4:E3:E6:BF:02:DC:DD:12:48:72:C0:AD
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       01962E61C5B64418795DF2D0445BB096170B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          0A2D
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: BQh1CK00iBX7O9b0Snj4zU3feyntN3dr22TLlBdgnTI=)
                          2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c5:b6:44:18:79:5d:f2:d0:44:5b:b0:96:17:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=ffbf43209237317ba4e3e6bf02dcdd124872c0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:6c:39:60:e8:69:67:7a:65:ac:fb:d4:cd:
                    9a:6b:0f:96:4f:05:0b:e1:40:ca:3b:11:06:fe:30:
                    66:64:c2:0e:db:85:a4:f0:40:87:f0:15:cd:b8:2f:
                    a5:ee:55:a4:67:63:f5:ad:7f:4a:5e:97:99:85:5b:
                    e4:c6:9d:8d:f5:6e:90:0d:1c:ed:c6:e3:f8:b8:35:
                    96:c0:ec:e3:c7:6a:9c:45:7b:ee:7b:95:f2:71:57:
                    94:53:f8:f7:d4:f5:0e:10:cf:26:d5:2d:90:7e:1c:
                    6c:fd:5f:1f:77:c5:27:17:49:93:49:25:fc:3e:8b:
                    c5:ad:bd:cd:2f:e4:f4:50:21:69:02:cb:4f:83:14:
                    ae:a3:c6:56:b2:3b:44:03:3f:0b:30:02:ef:83:2c:
                    35:26:1a:0f:8a:1d:6b:50:6c:4c:7e:82:0a:af:28:
                    96:e8:ab:7c:c8:23:b3:7b:22:3a:44:17:95:b3:4f:
                    1d:a3:a5:0f:8e:10:bd:e3:1c:05:b0:1f:17:e9:8c:
                    fc:d2:c4:f0:0d:1c:87:81:55:ff:3e:0e:1c:6c:d5:
                    88:b7:7e:45:10:81:ba:49:f4:d0:fe:66:fc:3c:d8:
                    5f:ec:e2:c4:fc:a8:00:0b:ba:98:24:62:fe:d1:2f:
                    dd:7c:00:9e:a0:fa:d5:6e:0e:f7:1e:8a:11:be:32:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:43:20:92:37:31:7B:A4:E3:E6:BF:02:DC:DD:12:48:72:C0:AD
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:5b:1b:3f:b8:62:47:0d:cc:8a:01:4c:62:a6:ea:b0:2e:
         cd:58:b9:1a:59:de:c0:5f:14:31:0d:be:87:8c:2a:59:8e:43:
         ef:6c:ea:f4:1d:2d:db:84:2e:ac:58:ad:3d:e2:6d:a0:1b:d6:
         ac:18:06:7f:4c:80:63:e0:60:0b:f8:ae:cd:27:81:48:ad:71:
         08:15:bc:91:6b:ea:6b:5a:8c:05:88:c3:a9:3a:7d:c7:c1:19:
         f7:50:26:c9:55:15:cd:b8:90:83:5c:7b:85:26:6c:b7:56:3f:
         b1:70:1c:d3:3f:8d:70:40:7a:32:b3:15:5b:19:a0:ee:11:d3:
         6c:e4:98:e6:8c:eb:81:80:6c:c6:5e:4f:7d:2c:01:b9:f8:1f:
         63:d4:6e:b6:e5:32:4c:b7:74:82:4d:da:95:80:83:58:a1:01:
         92:8b:3a:45:ec:f6:dd:9e:a0:7c:3b:15:a9:60:4b:59:99:23:
         97:b0:e7:46:66:c1:d4:36:d5:0d:f1:56:a1:92:ff:5b:c7:77:
         9b:10:69:3a:00:0b:4e:e5:32:af:70:0a:d6:e1:4f:f4:e2:9d:
         7b:7e:ef:db:c9:37:60:6b:c3:81:f7:38:65:8d:15:36:5e:d1:
         54:c3:8e:15:01:80:3e:33:40:3d:63:30:fa:e4:c3:42:2c:1f:
         fd:c8:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----