Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File:                     s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier:          E2bh3XKJAfppUOCJxdGY4sd0BQLsvXt44sxcBB5lGjQ=
Subject key identifier:   B3:34:A6:BC:83:4B:46:2B:D0:7A:D7:9E:B4:63:7F:C0:C5:50:52:E8
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer:       /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial:       01962E2B1CC85228590B45E7CE9A41E841DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number:          02F0
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: 8tLzMDfBo3cMJMxFRFMfRdmNS7KORXEVXDNPG73IoLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1c:c8:52:28:59:0b:45:e7:ce:9a:41:e8:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=b334a6bc834b462bd07ad79eb4637fc0c55052e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:54:dd:48:c9:f8:c4:17:1e:93:c7:9b:34:
                    3c:59:8b:a3:de:b7:0b:c3:5f:cc:b9:36:a7:87:a9:
                    7d:07:da:ec:90:77:18:f7:06:e9:66:d1:bb:f3:40:
                    f9:45:b0:47:5b:e4:d1:35:a1:a8:59:2c:ed:68:73:
                    97:1f:76:22:4c:01:5c:01:a5:a9:54:e8:ed:d2:ed:
                    98:33:96:0c:da:e7:2a:de:ff:c4:2b:e9:73:ba:85:
                    bc:d1:75:f6:27:db:14:7b:91:9d:24:19:8a:94:fe:
                    f0:39:da:64:a4:09:09:c7:df:38:1a:16:1e:7f:ea:
                    93:40:2c:03:39:2c:e3:70:57:30:b5:45:a3:b9:0a:
                    21:08:5a:1a:c5:68:f7:10:73:b4:7a:ea:14:42:c1:
                    fc:ec:40:ce:7c:ef:04:17:e6:a4:d0:e6:20:12:0a:
                    6e:27:fc:37:06:cb:91:67:33:63:bf:63:c2:9e:21:
                    35:86:31:b4:1a:3f:74:b2:e6:83:77:cf:f8:28:29:
                    56:d6:c2:4f:5e:bc:8b:90:dc:b0:68:84:fb:ec:12:
                    1e:7d:31:d6:cc:c1:e7:1e:15:8e:5c:f0:54:c7:b3:
                    0b:7a:3c:db:b8:d5:38:56:9f:a7:a5:e6:0e:44:be:
                    6c:c0:b1:61:af:b2:dc:33:b5:f7:c6:5e:43:31:35:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:34:A6:BC:83:4B:46:2B:D0:7A:D7:9E:B4:63:7F:C0:C5:50:52:E8
            X509v3 Authority Key Identifier:
                keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:ed:2f:6b:f6:40:6d:3c:fe:fd:90:62:9a:9b:3d:c9:cb:
         21:db:fe:fe:be:95:b5:dc:a7:b8:77:30:2f:46:9f:2b:05:71:
         65:a7:8a:c2:20:8c:09:39:f6:72:0a:83:7c:a4:38:74:a5:5c:
         e8:55:d3:46:e3:4a:ee:80:d3:ab:21:69:95:ea:ba:0c:65:aa:
         86:61:78:31:a6:64:7a:c6:e9:68:0b:60:51:4d:d4:9a:9f:c8:
         21:c5:4a:35:0d:dd:13:80:14:dd:03:f6:52:18:90:5a:97:d4:
         75:e4:4d:b4:fe:f4:96:b9:d7:00:fa:d7:e6:05:aa:79:07:db:
         c4:fe:47:f0:22:8c:2e:f2:99:d4:e2:a8:f9:f4:5c:d4:51:f4:
         88:d7:c8:40:69:f4:d6:1f:56:d4:d6:dc:1c:8b:29:7c:13:50:
         aa:30:0a:e0:29:85:10:a3:28:d2:25:76:02:1c:ea:be:ea:66:
         00:0e:49:69:a3:e4:e2:ca:59:07:5f:62:b3:9e:93:9c:2c:76:
         9c:db:70:d0:92:34:a6:96:39:b2:ee:41:ec:2c:89:d6:f1:c7:
         b9:96:f2:68:4c:64:70:51:ae:b2:04:22:b7:10:0b:ae:91:a3:
         eb:db:f9:58:7b:11:4a:82:1c:14:5e:b1:f5:18:3d:36:ce:03:
         72:cf:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----