Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File:                     5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier:          wS7TdEv6igybxNWyrcilH65PufUryOvoSGsWSNU9Wg4=
Subject key identifier:   9D:52:7D:4F:3B:04:85:31:7E:29:36:2E:C3:EC:20:6C:C8:47:1C:6C
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer:       /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial:       01962DF41AD5764DBAAEFAA147E03CC31277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number:          01A3
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: wmCHm21f+1lKaQo42ieKhi3uGq9iSsdB5W6m3TDVjso=)
                          2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:d5:76:4d:ba:ae:fa:a1:47:e0:3c:c3:12:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=9d527d4f3b0485317e29362ec3ec206cc8471c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7e:14:2c:c3:f8:c7:ec:a2:6b:9f:fe:89:80:
                    40:41:ed:c6:e7:88:dd:b9:ff:08:01:6b:f4:3a:98:
                    c9:a4:07:ea:24:ee:e2:8c:a7:9b:77:5f:b5:96:69:
                    e8:24:ac:4e:55:49:6e:20:32:04:e6:d7:73:7e:46:
                    ac:d7:91:31:a0:81:d0:32:24:3b:f8:47:a7:22:36:
                    76:fc:3a:fa:3a:fb:a6:05:e8:df:4c:cb:1d:f8:e3:
                    7b:ea:32:3b:27:0a:1b:a7:d4:a6:86:e0:9d:7b:a7:
                    8c:fd:30:d3:60:e5:81:82:b8:83:15:80:93:77:52:
                    60:8e:aa:59:96:76:32:fe:30:8b:7a:6a:67:55:d3:
                    c4:a9:ac:3a:ed:30:c1:b4:92:ba:8d:14:62:85:f5:
                    9d:f6:7a:f1:cd:66:85:0e:61:70:ba:f8:74:b5:3c:
                    7c:3e:00:fc:41:3d:70:eb:18:de:f9:90:b2:b3:43:
                    43:e7:ef:93:d0:a3:af:e3:43:b3:45:36:5c:a9:ed:
                    32:b8:85:df:23:0e:81:77:75:4c:bc:9b:99:ba:3c:
                    4e:2a:ba:27:ed:8f:f3:9c:c2:b5:df:12:67:9a:41:
                    ec:99:11:d7:d4:77:36:39:51:3e:58:d9:09:91:d3:
                    52:df:83:5d:29:1d:fa:ec:a8:6e:65:5f:84:59:ca:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:52:7D:4F:3B:04:85:31:7E:29:36:2E:C3:EC:20:6C:C8:47:1C:6C
            X509v3 Authority Key Identifier:
                keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:47:8e:3d:fe:5e:65:26:ae:5e:45:47:67:5c:77:26:e6:
         4d:7d:71:4e:49:4d:db:1d:8f:bc:39:1f:e0:50:d3:53:77:e4:
         3a:39:21:e3:c6:3a:85:39:31:fb:f0:e0:60:fb:5a:50:e4:f9:
         68:4e:a6:2a:22:67:59:e3:46:90:24:18:ae:1d:a4:e5:a4:ef:
         ae:bc:70:28:60:df:38:27:11:9b:50:1e:7e:2b:0b:80:2a:1e:
         40:35:c4:cb:f5:f0:2a:7f:cd:64:0f:ef:0a:5d:53:cf:37:84:
         95:e4:4a:88:da:69:11:47:95:77:d9:ad:25:06:52:be:47:7f:
         21:ec:b2:05:22:46:7c:9c:e0:a9:a6:6f:cc:bb:64:38:65:fd:
         63:ac:60:f1:91:e6:b6:f3:66:b1:ee:ff:47:63:07:15:db:fe:
         ae:f3:19:72:d1:73:73:c8:29:8c:67:84:7c:09:df:66:e3:7c:
         86:52:a1:d1:ec:6d:46:52:33:bf:3a:61:43:a4:f3:10:47:39:
         90:5b:c2:cb:8b:7f:56:55:1b:c3:d0:7f:89:a2:b7:5d:85:cb:
         f3:8f:de:cc:74:65:01:48:71:b0:b2:b1:43:24:70:82:17:27:
         e6:b9:3e:95:75:d7:8d:14:17:60:93:76:da:d5:0a:42:04:3d:
         82:c0:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----