Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File:                     5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier:          zjuHv0K7OLNVPfBkHI5DluZQJS+lMutE5D7h9MkLSl0=
Subject key identifier:   5C:F7:86:E4:FF:AC:1A:37:62:DC:A1:27:97:1A:1B:E8:EC:71:22:48
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer:       /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial:       01962E61C021F308CBB23E66367710198409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: Mr77G1lKFEuHx8NRmgvBJCwUADNBL3LL9klDbUXL7w0=)
                          2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:21:f3:08:cb:b2:3e:66:36:77:10:19:84:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=5cf786e4ffac1a3762dca127971a1be8ec712248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:ce:93:44:33:22:5b:73:4e:37:a2:79:60:
                    0f:30:b1:92:41:da:ff:77:d6:57:b2:ff:91:0a:98:
                    4c:87:1c:cc:f2:02:ce:d7:41:9c:0c:6d:24:7a:ec:
                    f2:54:48:1b:03:dd:3a:48:01:5b:b2:49:32:fa:2f:
                    26:af:50:0f:cf:0f:eb:6a:d7:16:0e:a6:79:1e:ec:
                    46:eb:1d:39:fe:eb:35:5c:8a:a0:33:90:ca:a7:77:
                    9d:e3:6c:d2:97:25:01:9b:27:b9:48:c4:fb:0d:22:
                    c1:82:5f:0d:32:12:da:a9:51:2f:8b:46:24:27:57:
                    ba:87:30:06:fc:c3:7c:72:05:bd:19:e6:cf:df:c7:
                    f5:96:56:61:4e:aa:e7:15:bb:73:3c:21:93:ba:7a:
                    f2:e0:b3:0e:33:46:c3:43:3e:71:74:fd:ee:ac:db:
                    38:32:4b:e7:4d:40:cb:a2:fd:ff:ac:a0:09:2c:db:
                    2a:88:82:52:d1:62:d8:87:d4:67:4e:16:cd:af:be:
                    71:fe:98:41:ef:4f:16:33:eb:41:76:eb:d8:04:74:
                    3d:2f:56:84:8a:49:e1:95:9c:65:fb:f0:80:d7:23:
                    2b:92:0d:54:2f:de:0c:01:46:77:0d:e5:d8:ec:e1:
                    f3:13:5f:93:bf:d3:ff:bc:da:82:6d:e3:14:98:6c:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F7:86:E4:FF:AC:1A:37:62:DC:A1:27:97:1A:1B:E8:EC:71:22:48
            X509v3 Authority Key Identifier:
                keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:97:98:0a:80:4c:be:b1:80:87:62:65:d4:4e:31:29:24:
         3e:4b:95:66:68:be:11:32:1c:6f:62:95:72:02:8f:b6:69:9a:
         3f:ce:3d:d4:95:22:3c:c2:2d:13:35:a2:39:b1:1a:2a:7b:2a:
         db:ed:a3:fb:0d:d7:71:d9:03:63:d2:f6:e9:c0:99:f7:ec:0f:
         0f:78:e6:40:72:5c:a7:ba:38:26:c8:ba:13:ae:1d:4b:b1:92:
         2b:92:f2:10:fd:5d:2b:ce:ed:ac:64:cd:88:f4:47:05:7b:28:
         06:8d:55:6c:4d:8c:58:70:47:f4:31:5f:30:fd:99:2b:a4:d5:
         7f:5a:59:4f:26:fb:2e:62:92:d0:b7:d5:35:e9:4b:87:6c:bc:
         07:a4:d4:df:d0:9e:f7:6a:9b:8d:3e:d1:8f:3c:e5:e7:5a:c0:
         cb:0b:a3:22:34:a7:a9:eb:00:b4:9f:fa:ed:ab:f0:05:28:cb:
         15:25:d7:2d:cf:07:cd:29:08:e2:4d:17:e4:4d:da:e1:db:38:
         fb:49:47:1e:f9:91:67:b0:74:b4:55:0d:0f:bf:41:f1:c1:3f:
         33:9e:5e:f6:bd:99:38:9b:49:68:be:c1:00:8f:b7:03:5f:86:
         29:53:11:f2:40:d7:e8:50:26:b0:11:10:a5:48:24:bf:11:c4:
         18:46:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----