Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File:                     5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier:          NAdM4hAB5mHZUYlHkpDsRfErac48cA1dzNNR5ZSMuWM=
Subject key identifier:   BC:88:76:40:7B:00:87:17:0A:B7:DE:A5:D9:91:13:B3:45:31:EF:3B
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer:       /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial:       01962E617C62C7341841B634F5BA40D17A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number:          0FA0
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: Jl7DnkmqMrI8+HfCb+EQgqtL5+SS5diNg4xgaUylOmI=)
                          2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7c:62:c7:34:18:41:b6:34:f5:ba:40:d1:7a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=bc8876407b0087170ab7dea5d99113b34531ef3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:21:db:81:6a:a6:a8:95:41:94:27:7f:73:
                    61:25:1e:49:e7:11:09:f1:49:fa:df:9f:02:12:1c:
                    10:91:97:99:98:cd:6d:43:49:11:f4:3f:94:2f:d9:
                    64:bf:15:18:c9:c1:5b:c3:01:25:ea:c6:a6:63:cb:
                    6f:54:d7:8c:14:ee:be:73:39:ec:8c:cf:e2:42:07:
                    96:30:08:c1:fa:d3:9b:07:54:6e:9f:f2:a3:bd:0d:
                    26:e3:8d:08:b8:ee:48:26:46:ae:aa:92:87:77:66:
                    54:68:c1:b6:2f:a0:c0:e1:65:ef:ee:6a:4d:42:3a:
                    13:eb:e7:ce:7c:19:b2:af:d6:ee:4c:72:26:2d:8a:
                    b6:50:86:33:58:21:1a:78:b7:aa:20:a0:7b:26:c9:
                    f6:e6:d2:b6:10:55:74:dd:26:cd:23:12:ac:f1:e4:
                    d9:18:33:2c:7c:6b:0a:a6:33:02:7f:9b:5e:eb:9a:
                    6f:cb:a9:68:a9:03:06:aa:97:64:64:e2:51:4f:e7:
                    6c:f9:da:1c:9a:98:96:53:1c:d8:11:c4:18:f6:4f:
                    6c:f4:ae:05:09:80:0d:4f:bd:0b:65:dc:de:fa:48:
                    bf:e5:54:0f:ba:56:97:39:b4:92:e8:55:ee:69:0d:
                    9e:8f:be:0e:cd:73:13:dd:05:bc:98:7d:2f:0f:8f:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:76:40:7B:00:87:17:0A:B7:DE:A5:D9:91:13:B3:45:31:EF:3B
            X509v3 Authority Key Identifier:
                keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:ba:97:6c:c6:ed:6f:53:db:36:9e:74:8f:8d:fb:96:fe:
         b8:84:6d:c4:b9:a3:fe:a7:74:50:89:c6:da:bc:a9:0a:07:52:
         39:48:f1:05:c0:e8:74:c8:8d:eb:3a:78:96:98:94:e1:45:c4:
         f9:6e:5f:a2:68:c5:2f:e7:f5:bc:79:e0:c5:ad:81:78:8a:fe:
         31:e5:64:7e:38:16:ae:df:ac:ec:8e:31:1e:a9:cb:f8:d5:37:
         9a:91:a0:92:9f:3f:4b:29:56:4b:c1:97:6b:f1:91:3d:bd:08:
         5e:ff:10:1d:9a:87:b7:7d:8f:92:84:d6:ed:db:02:06:ba:41:
         01:9b:fb:3e:63:49:60:c0:cc:60:ea:fd:ae:4d:c1:cd:3e:7c:
         9b:a4:e2:fd:2d:e4:b0:d2:1c:c2:41:b3:52:87:74:8a:b5:f7:
         d6:cb:ef:4e:9c:bc:36:bc:73:8a:f6:30:14:0a:4e:e3:09:7d:
         46:74:44:3a:40:db:31:ec:49:33:9f:33:a1:ff:dd:ce:dc:66:
         56:eb:4c:40:38:c3:27:ba:a9:b4:02:db:0b:19:02:bd:92:b1:
         9d:e7:a3:1f:f1:8f:81:11:bb:6d:be:c6:09:38:fb:77:e9:d6:
         47:54:e1:79:1c:b7:a1:fd:fa:6e:b7:d5:05:b4:73:45:ec:a5:
         0e:ef:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----