Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File:                     5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier:          bRF5aX9HJZPjHGKnfza4mt6zIQDxdG82Oh3KpPQkT4I=
Subject key identifier:   89:2F:ED:5A:EF:B6:7B:C5:FA:2D:18:0F:10:72:15:94:E8:48:30:65
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer:       /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial:       01962DF4446A46BD44FB78DE3D39CCD9C8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: 63+Qam2rBXaxIL3XuCVQ944KsxDVUanwabB9LfTrdHk=)
                          2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:44:6a:46:bd:44:fb:78:de:3d:39:cc:d9:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=892fed5aefb67bc5fa2d180f10721594e8483065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1b:54:57:db:a7:b3:86:f6:b3:ef:d7:8f:fe:
                    ed:ec:69:b8:c7:3d:37:6e:7f:e7:14:79:ba:a8:3c:
                    e7:5f:20:41:7e:43:91:52:4d:61:5e:af:ec:af:74:
                    99:f8:bf:fa:c8:ea:e3:78:00:e1:b3:c8:7f:73:47:
                    0c:2c:b5:ee:a4:55:12:8b:06:73:9a:9b:36:9a:91:
                    99:6a:9c:25:db:ea:0a:64:9b:fd:01:98:5e:b9:56:
                    19:fa:f7:b5:d2:19:5a:62:48:8d:1f:9d:62:62:70:
                    7e:14:9f:64:61:88:9f:ab:74:43:89:d9:6d:78:02:
                    04:74:d7:ae:7e:a5:40:c0:98:b4:ea:7f:3f:f5:fc:
                    ba:79:9c:13:f2:aa:1e:1f:6f:b5:01:5d:09:e1:93:
                    43:19:e8:15:16:2d:20:a7:11:ee:38:e2:7d:90:7a:
                    42:15:76:62:5c:51:b4:d7:e6:12:6f:9c:63:3a:89:
                    7d:11:8e:c1:f7:26:56:15:7c:a6:9f:83:fa:07:dc:
                    ee:f3:38:b8:ef:ec:8e:0f:3b:99:df:81:99:77:2c:
                    44:a3:9b:6d:a2:a8:6b:35:c8:cf:67:34:8c:0f:2d:
                    ac:7b:f9:57:f9:e4:bd:49:5a:f8:76:da:9d:af:40:
                    2a:e9:f1:f0:e4:d7:0d:8d:17:dc:83:55:0f:97:71:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2F:ED:5A:EF:B6:7B:C5:FA:2D:18:0F:10:72:15:94:E8:48:30:65
            X509v3 Authority Key Identifier:
                keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:fa:d2:63:32:43:cd:e5:44:8a:92:e4:ad:50:87:99:1d:
         9b:82:8a:ac:99:a9:c9:60:8f:58:52:5f:a1:90:7e:e4:9e:1e:
         9f:4c:bc:31:c6:59:96:da:40:2d:00:67:7e:27:fc:2f:c1:46:
         01:9f:f6:85:df:e4:83:d2:48:51:18:80:5f:17:2d:99:bc:44:
         d5:01:45:d1:4e:80:6d:48:c7:04:ba:5a:1d:b2:41:94:0e:c3:
         fd:4d:2d:62:3d:18:05:1b:d6:a3:84:b7:75:2a:9c:9d:e9:80:
         27:d4:bc:3a:4d:e3:e0:42:ea:7e:e3:97:75:de:88:31:0b:19:
         7c:22:d3:0e:05:26:63:c3:fa:9a:79:f7:ce:01:d4:3d:11:f8:
         d2:13:bb:67:d3:6a:7a:80:81:17:2e:d4:40:83:ef:7b:42:4b:
         2f:2b:00:b8:e9:62:4f:c0:63:e2:45:ec:92:2a:66:7c:e2:d6:
         26:1f:71:13:d2:b3:94:a0:b2:28:c4:17:9e:17:a8:6b:6d:90:
         7c:71:f4:d3:30:fc:23:76:ad:8e:a1:bb:38:cd:29:8d:85:7b:
         c1:23:49:7a:87:46:b6:9e:b0:de:95:02:8e:78:64:45:d7:29:
         ab:85:1f:24:a9:ce:fa:a6:c4:8b:15:fe:86:73:c7:5f:a6:43:
         e7:e1:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----