Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File:                     s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier:          jCLjaXSKKl61C/24CTugVp5QvEzhPlAiTUCvn864ilM=
Subject key identifier:   48:E3:E2:9A:E0:CA:83:46:EA:ED:E2:58:03:10:3D:60:31:0C:7B:D8
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer:       /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial:       01962E61ADC6F888EA874BD1FD9D9F364157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number:          0EC4
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: GhdbZGuzA1z36-UUonZ5zaCX38Q.roa (hash: gEgIQ1ixFSRgI4FI7VMbdhgtgY8jLC1wmNutDGTQS80=)
                          2: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (hash: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=)
                          3: QCQJObKakvoo4ygnw5Fh20FS0Ts.roa (hash: pr5RHo/glhDEkjitYcq1TogKj+NW5j/LUqIM2EWPEaw=)
                          4: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (hash: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=)
                          5: _Mh128pzYy1Xp_Mqu2FTdaxsXrM.roa (hash: t+fZ7eI3onUFmCJkmSKbgzVRgPnoPOzTTVumnB2v6Xo=)
                          6: eulbDis-0B0z9GbHcqEo9NdV9rU.roa (hash: r5N8Yg0+954vST6YgvvV4VsOdx/dWOgqxmrlpu8jwtw=)
                          7: peZQPUG6EREQXk9fJ6XL9FgtEhs.roa (hash: dkv5IIQlSg33elfikzY5ije40KJ3f2E2+53gSCvVzhE=)
                          8: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: 47zNfHGG90rRGC/ymMWxTsAJvzZtcHbkIeDHQ7BGgwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:c6:f8:88:ea:87:4b:d1:fd:9d:9f:36:41:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=48e3e29ae0ca8346eaede25803103d60310c7bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:35:26:db:a8:7b:48:77:24:51:cf:21:60:
                    9d:57:99:e2:64:42:23:c5:e4:d5:c3:08:d1:96:1f:
                    cd:56:63:82:87:ff:7a:a8:b2:51:95:0f:ce:a2:7a:
                    59:44:5f:6c:7a:b8:bd:11:eb:0b:81:9f:3c:0b:8c:
                    4c:38:32:5a:06:ef:1c:18:16:33:dc:b4:a4:cb:a9:
                    91:ff:ba:a2:b9:ca:cb:69:1b:1c:27:f2:19:e0:17:
                    9c:88:bb:e4:6a:e9:32:62:52:27:f2:94:32:cd:52:
                    21:20:a0:df:6e:cc:74:14:fe:5d:76:ef:3f:a9:f8:
                    dd:4c:57:51:82:55:66:a0:97:b8:82:c7:1b:36:73:
                    83:96:d2:c1:59:e6:e6:cb:d4:3d:a5:7e:dc:0e:86:
                    9c:54:a1:ea:49:96:6d:13:aa:2d:73:d5:7e:e2:b1:
                    cc:45:0d:e9:c0:7b:4d:f9:e9:f7:09:d6:11:0f:dc:
                    f9:47:ee:0e:d7:8f:fd:bf:c8:ff:3f:a6:3f:b3:7c:
                    0d:f3:b1:59:e1:e2:e2:6d:8c:82:4e:28:51:de:8d:
                    e6:98:cc:da:ee:e1:f3:a6:c4:59:82:8f:54:24:52:
                    71:60:fd:e7:fc:91:0a:a4:53:50:bd:6f:27:01:2c:
                    30:de:d7:55:c7:d3:2e:60:29:48:02:d3:58:b6:19:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:E2:9A:E0:CA:83:46:EA:ED:E2:58:03:10:3D:60:31:0C:7B:D8
            X509v3 Authority Key Identifier:
                keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c1:60:9b:b6:23:f6:4e:ba:90:3c:4b:24:5b:a9:f2:c9:85:
         44:fa:df:4d:ca:4c:b0:49:2f:69:23:d4:04:49:a8:7d:27:a1:
         75:7d:be:f0:7f:df:27:cf:7d:8f:41:66:3a:e5:c6:f1:d1:3a:
         43:56:e7:ac:3d:ff:ea:0e:d3:33:09:05:fe:cd:b3:69:74:b2:
         3e:47:f7:67:f2:8e:c5:fe:d5:f4:83:fa:61:d2:e8:c7:96:bf:
         f9:01:f1:49:ec:69:63:3b:39:3f:72:9b:3f:a6:3b:27:73:e0:
         1f:c9:9c:8f:1c:8e:83:59:73:a7:77:bf:d5:49:cd:5c:0c:2e:
         6d:2d:c1:22:a1:f5:96:6c:25:27:a8:a6:a7:2e:82:4c:27:ac:
         b6:d6:c7:1b:db:88:1e:f5:cc:ff:23:15:e3:63:f6:40:ba:bf:
         a8:f5:f9:47:c4:e9:a7:7d:7f:f6:48:cc:5d:ad:d1:0a:7a:c8:
         3b:cb:03:81:24:11:82:57:a5:86:5b:78:3a:3c:05:cf:77:cb:
         13:f8:9c:47:16:7b:c8:93:ce:5e:4d:2e:66:f0:49:1b:4a:ea:
         45:1a:df:f2:d0:66:2d:30:ec:85:be:8f:71:28:55:e7:35:5a:
         0e:01:75:11:cd:f7:68:3b:d9:4f:48:15:ac:ff:30:da:60:c1:
         9b:90:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----