Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File:                     5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier:          a6sR6nS/6vt00k9RsmgnQqy7iOQjoaiEiFNP/isQCas=
Subject key identifier:   51:4B:53:AB:9C:2F:B7:89:BE:20:FC:A0:79:DC:BD:75:D7:64:84:C7
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer:       /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial:       01962F064EF7486AB8306EEE93BECDF4EABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number:          057D
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: Fl5A4UhF8Yxe5WXIQ+s1IKthKXN1ctgUHfuI7plxxOg=)
                          2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
                          3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4e:f7:48:6a:b8:30:6e:ee:93:be:cd:f4:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=514b53ab9c2fb789be20fca079dcbd75d76484c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:1a:11:d2:d1:61:c4:be:f5:c7:fd:50:dc:
                    fb:1e:ef:fc:53:3b:bd:90:74:76:f2:0a:df:10:4d:
                    a2:b3:2a:80:b4:59:9e:5b:bb:39:c1:be:24:1f:9a:
                    6e:77:5c:80:89:e0:37:7c:ce:97:d6:3d:0e:0d:93:
                    46:f6:01:c1:b8:fd:4e:c5:44:a4:28:7a:bd:9f:90:
                    a0:d7:31:b1:55:d1:5f:e3:bc:1f:6b:a5:30:ce:f3:
                    e7:04:e7:7e:15:c8:76:51:5f:67:35:be:47:2c:23:
                    ea:67:8d:1f:04:e3:68:4c:a4:31:5a:b1:c5:ba:4e:
                    6d:62:54:39:40:d7:c4:9c:1a:0a:be:d5:ce:43:0d:
                    41:16:10:01:76:3f:d7:38:4a:1c:8e:8d:c4:8c:a3:
                    5d:5a:11:38:3b:62:c6:14:ed:ef:60:84:37:5d:6b:
                    56:04:28:c5:9a:17:c2:1c:60:d1:5e:3d:29:83:c5:
                    cc:a0:e6:50:5e:db:cd:61:58:ef:c2:e7:df:81:be:
                    38:7d:ce:fb:20:79:ad:4f:d3:f1:db:d1:d9:45:60:
                    d3:4f:57:44:95:1c:e0:99:0f:28:64:e6:4a:2e:17:
                    db:04:a6:ed:8a:6a:5b:75:ea:43:dc:4e:92:3b:c5:
                    aa:e9:1d:0a:99:49:40:0f:d0:0c:80:09:2c:7a:57:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:53:AB:9C:2F:B7:89:BE:20:FC:A0:79:DC:BD:75:D7:64:84:C7
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b0:11:e6:d4:1c:38:ab:c5:85:33:1c:21:e4:12:f5:0c:37:
         31:93:a6:43:e7:01:54:f8:16:ad:77:e0:cf:4c:e7:be:90:49:
         fc:46:d6:4f:b7:72:07:53:60:a2:4a:d5:d6:3e:95:8a:ec:0f:
         7c:16:21:44:4e:67:5a:2f:4f:73:62:e8:0b:54:e1:1e:13:82:
         41:82:a7:50:11:47:3f:d9:43:6a:94:99:24:24:ed:94:69:84:
         a9:6a:5b:42:1a:54:56:f2:b8:33:cf:b0:ad:9e:fa:3c:74:9f:
         91:73:6c:ca:dc:8c:84:46:c8:39:c1:af:49:d2:49:cc:2c:a9:
         42:1e:eb:a9:bb:ca:5c:5f:4f:47:32:6a:ac:62:d9:9a:4f:f5:
         0f:dc:2f:69:86:71:6a:13:bb:9d:c3:43:62:80:e3:ff:9e:4e:
         9e:1b:50:74:07:a7:5b:e3:b5:ca:a4:53:52:99:d2:81:cc:47:
         e5:96:69:1c:b3:de:b6:44:2b:3d:ed:ea:4f:a8:c4:67:f4:8b:
         22:b4:dd:d4:5b:43:cb:32:7a:d3:ca:2d:bb:41:ff:59:94:2e:
         b9:d9:0f:38:88:c9:17:9c:98:4f:6d:87:9f:1e:ca:0b:5b:14:
         b8:14:93:67:57:00:47:da:30:0c:35:bd:a9:3b:6f:d1:50:b4:
         45:3a:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----