Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
File:                     5miK6WMjwfz6tUspRVc5e0mwO8c.mft (raw, json)
Hash identifier:          QAzUWe90H2IJrmrof8cQ9EE5pO531ab8Izri+MfxIE8=
Subject key identifier:   A5:9A:E3:DB:60:B1:BE:92:27:58:89:1F:44:70:20:69:BC:30:8F:0C
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Certificate issuer:       /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial:       01962F3D751633E540C7EF073974D157CDA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 5miK6WMjwfz6tUspRVc5e0mwO8c.crl (hash: kFNqGkMZoexcOkzhnuQyOogfYMbIBTkfJ8sz4G/yrD0=)
                          2: 6d81q_lbBBvU-iMaj2PmLykzsqc.roa (hash: CeNeRZHxa3cGB4BlKcDCcgvych6z2Vt9p5goEzBLjMQ=)
                          3: RcUSQ0Z3GKFYWJ4WRE1UedcK5Aw.roa (hash: hdoD+wycfWRw3rbXWOc6rZDgH+1OEob47XUZHRAtJR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:75:16:33:e5:40:c7:ef:07:39:74:d1:57:cd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=a59ae3db60b1be922758891f44702069bc308f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:81:1f:3f:66:e5:9e:d3:87:6b:78:8e:98:
                    98:a1:4e:02:0e:4d:02:9f:8b:66:db:4b:bb:cc:42:
                    34:b3:53:33:db:3d:b1:a8:52:f3:4c:48:32:4b:4b:
                    88:8f:b5:c4:26:3f:9d:7a:3e:b2:9a:5c:07:33:06:
                    69:0e:10:cc:c8:8a:bd:03:89:08:ed:8c:c7:a3:8d:
                    2a:02:42:6d:d3:7d:a0:b8:49:cc:38:38:48:6b:3a:
                    01:12:76:fb:59:d1:5d:d7:21:17:d8:6c:e9:53:68:
                    de:24:db:46:ba:e8:09:8a:89:f6:da:10:b5:c4:74:
                    9e:c6:8f:5c:09:84:59:e7:f3:f0:a6:a6:74:6d:46:
                    98:06:3f:ac:d6:70:f0:ab:bb:64:62:b9:5e:1a:0e:
                    6c:f6:d2:3d:42:07:e1:25:27:b4:c9:79:09:36:82:
                    5c:3e:2b:35:b0:15:5b:f6:de:46:de:68:e8:b8:48:
                    75:32:a6:9b:fc:a6:cf:cc:85:81:4d:33:9c:c8:12:
                    e1:e6:b8:8b:6c:8c:fb:d6:24:d4:76:c2:00:32:f5:
                    0a:47:2a:09:08:74:19:47:2b:a8:64:2b:2e:0e:af:
                    97:8b:de:02:50:56:92:b9:81:5d:39:f5:06:62:55:
                    cc:a6:6b:51:d5:62:4e:cc:c4:b0:c8:ec:a2:a4:21:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9A:E3:DB:60:B1:BE:92:27:58:89:1F:44:70:20:69:BC:30:8F:0C
            X509v3 Authority Key Identifier:
                keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e9:f3:74:40:d1:01:a6:6a:13:e8:0b:df:d8:d8:30:fb:1a:
         e0:f8:2d:8a:47:55:19:94:85:a7:56:ee:9e:18:b2:14:14:be:
         07:2c:64:15:c6:c9:23:90:73:0a:db:03:59:fb:96:2c:36:47:
         16:c1:db:d0:0d:4c:45:ef:b1:48:8a:0f:d4:fb:24:d1:c7:92:
         20:81:e1:a0:02:41:b1:1c:17:71:d1:63:4b:ff:5e:61:c1:19:
         8a:20:44:28:f8:dc:92:09:d9:eb:92:f8:08:34:46:0c:18:e5:
         45:07:59:1a:ac:ae:c1:b0:b1:34:af:d9:45:29:ba:5f:fd:cb:
         67:4b:43:1d:79:ed:78:7e:17:de:c2:2a:85:de:3d:39:9d:55:
         1a:ea:c5:30:ae:a2:62:cc:9e:8f:68:14:4a:0e:7e:70:cd:85:
         48:0d:25:7e:d6:4d:4b:a6:55:b6:13:65:15:1c:3d:71:de:7b:
         f7:c4:f4:37:80:09:f7:5c:83:63:8c:75:58:d2:ef:48:2f:3b:
         af:6f:0d:ec:e4:ea:6e:0c:57:dd:25:bf:b9:cf:6d:9a:81:5e:
         93:5a:d0:60:ec:e4:60:1a:28:94:8a:99:1b:98:60:c3:43:c5:
         da:4b:9b:20:a7:49:de:06:cf:21:a0:86:20:53:a8:c4:40:16:
         01:9f:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----