Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File:                     5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier:          U+E9DXNsxB6VrIHcijK/GR6OYc9aNkzlDp0a1C0ibhk=
Subject key identifier:   5F:B1:9C:2E:95:96:EA:A2:D5:D3:A7:24:C5:9D:28:1E:CF:B9:31:C4
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer:       /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial:       01962F3DAEEFB8703B23A3A8CD1B84954C6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: 46HtQ5fPz2WJOsZpuVfIKdB6D0ItRV0KwTiIj4XmBfU=)
                          2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:ef:b8:70:3b:23:a3:a8:cd:1b:84:95:4c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=5fb19c2e9596eaa2d5d3a724c59d281ecfb931c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:3c:17:23:94:04:5e:14:5c:fb:fd:04:66:
                    83:f2:2b:5d:1f:1b:61:ee:35:da:1a:f8:11:12:b6:
                    e5:84:bf:3c:db:e5:33:b6:52:e0:0b:83:c8:07:1d:
                    b7:d2:8e:0d:1a:fb:6a:eb:eb:cb:43:e1:b9:f0:11:
                    f6:88:d8:ea:5a:d4:27:63:87:34:6c:ea:2e:8b:d6:
                    e8:1d:09:a3:79:bc:d1:22:25:3f:41:45:81:38:d1:
                    c1:ef:7b:19:ec:3a:e4:95:bd:96:82:82:ae:73:ea:
                    39:8f:4f:92:73:6c:c6:a5:a4:4e:7b:55:ae:6e:3b:
                    67:5c:55:38:cf:cc:94:ce:8b:17:3d:c5:ee:d2:71:
                    cc:1c:31:4e:c5:6c:04:15:62:61:a6:7e:ed:a5:2d:
                    85:a8:f6:a3:8c:98:7e:99:bd:de:df:15:2e:76:b6:
                    f7:1d:87:98:e5:1d:5b:eb:dd:02:e9:e4:58:57:3d:
                    0c:db:b2:63:9b:18:0f:3d:e9:98:d1:ca:9d:4e:39:
                    4b:3d:06:d7:a7:b6:2e:ac:1e:d0:f4:f7:e3:2d:fc:
                    53:e6:65:a1:74:47:1a:be:d3:0d:58:eb:6e:25:cd:
                    64:90:b6:5e:56:96:83:50:d5:b2:f2:b4:8b:f4:2f:
                    78:bc:ed:87:87:21:dd:6c:65:4b:8c:2e:08:74:0f:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:9C:2E:95:96:EA:A2:D5:D3:A7:24:C5:9D:28:1E:CF:B9:31:C4
            X509v3 Authority Key Identifier:
                keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:d0:b4:92:31:26:56:45:03:40:ba:e9:fd:fe:72:e2:7e:
         40:93:9e:25:a8:70:0b:bd:a0:74:85:d8:61:b1:74:10:99:a6:
         62:1b:b3:ac:05:a6:f3:5c:52:03:6a:c0:8a:f0:07:47:4d:96:
         01:a6:37:d1:c4:cc:c5:8b:e5:44:0f:9a:ae:9f:30:21:57:77:
         14:ee:84:b9:15:e6:e8:23:a8:b3:5a:4c:2a:f2:2f:83:cb:81:
         01:64:fc:6f:cd:c9:ca:d2:6a:c9:59:fb:32:74:ea:a6:7f:a4:
         43:85:35:36:86:6a:b7:b9:6c:bd:c3:c1:d1:c8:a9:32:a1:0e:
         43:61:6d:f3:f8:f7:77:c8:ad:a6:6e:65:b8:57:6b:b6:98:59:
         04:ef:0d:d8:12:96:57:69:c8:15:79:13:f9:40:0d:56:39:66:
         db:3d:c3:f9:04:8a:f7:39:3c:87:04:ec:9a:41:0c:72:64:d7:
         1a:51:b2:7e:c0:b1:7b:b3:98:6b:ea:06:e0:21:6c:8f:af:6c:
         79:c5:aa:d6:81:8c:f5:dc:2a:32:62:32:f7:92:d3:14:e8:ca:
         eb:e9:ea:88:16:f1:5e:ac:67:18:53:d2:a6:d3:f6:f4:40:28:
         88:70:ba:71:5a:53:ca:8f:35:2e:13:d1:01:d8:f2:a2:eb:70:
         17:20:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----