Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          mIiqVty8WzjNcWhxT5UPs9PE3Mqxjch37GIIQdlOHw0=
Subject key identifier:   E2:61:32:7D:B1:3A:AF:22:CB:0C:8D:50:1A:DD:D5:81:0B:B5:2B:74
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       01962F3DD48A3B6C2ED08030B4D2D1112400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: y6/vFBGjnQeL92WsY+prvt31GNA9OkchbRqeTbhyF/E=)
                          2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
                          3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
                          4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
                          5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
                          6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
                          7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
                          8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d4:8a:3b:6c:2e:d0:80:30:b4:d2:d1:11:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=e261327db13aaf22cb0c8d501addd5810bb52b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:43:92:2e:43:9e:8b:8b:a3:73:f2:a0:32:
                    d5:27:6c:8a:ff:08:59:17:f0:ee:2d:f3:b1:df:be:
                    02:e3:df:a7:cc:38:81:e8:9f:ea:73:81:b4:18:29:
                    38:fe:b2:93:ea:01:25:4a:21:98:31:13:13:74:e4:
                    1a:55:41:27:a7:5d:47:d4:ca:6f:79:2b:7a:85:ed:
                    7f:1c:48:83:a0:24:28:89:aa:b7:27:f5:f3:b8:41:
                    99:e3:ec:8a:16:c6:f8:dc:ff:4a:55:91:77:6c:7f:
                    62:2a:3f:66:b1:4e:07:bd:73:cb:6b:61:31:d6:5a:
                    30:9c:e2:03:75:b8:75:17:30:e4:10:17:b8:55:83:
                    b6:7a:55:40:80:7d:1c:35:43:39:51:e9:54:6c:45:
                    a0:0d:b5:ab:69:f1:02:65:76:e9:b4:b5:65:98:fb:
                    c6:19:39:9e:f3:7f:2a:41:0a:ac:1c:e4:13:0a:19:
                    b4:3b:88:10:89:74:b6:3e:9c:2d:c0:f4:e1:03:49:
                    4d:56:4a:27:86:bd:29:5e:75:d8:7d:73:7c:1f:23:
                    85:f7:27:31:5b:51:0c:fc:be:9a:1e:58:8a:5f:72:
                    96:2a:6d:6d:d5:4c:b4:f8:f0:4b:60:a8:0b:c1:fc:
                    8c:a6:3f:60:6c:9f:94:ee:ec:88:a5:e9:33:ef:8d:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:61:32:7D:B1:3A:AF:22:CB:0C:8D:50:1A:DD:D5:81:0B:B5:2B:74
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:05:90:6e:cc:26:25:a5:ec:62:ed:51:44:e3:f2:d0:ba:
         20:fe:3a:9f:ba:0e:a6:f7:f4:23:c5:09:83:78:74:7e:16:fd:
         5d:fa:0a:58:a0:06:7b:60:c7:7a:3f:f0:db:c5:b2:05:f8:bb:
         39:66:a8:fd:05:09:ca:19:ca:af:16:04:d8:a5:69:b3:96:10:
         4d:f7:94:df:57:e5:fc:c4:e6:1e:51:1f:da:9f:ae:4d:82:af:
         0b:61:50:97:72:ab:7e:e6:20:b1:ce:7c:08:e4:e4:00:82:e5:
         ef:b6:61:59:57:5d:7a:cf:2f:b7:f7:40:6a:2a:5a:8c:6d:3d:
         ca:d1:83:54:cb:bd:49:6f:2e:40:ec:03:9a:82:49:13:ab:d3:
         9e:fa:fc:80:93:8d:94:ad:e7:51:a0:66:67:63:77:0e:85:c9:
         43:d7:28:6e:ea:6b:71:50:e4:fc:00:b5:55:51:8a:a6:ff:97:
         73:87:ce:15:bd:b1:17:16:2a:37:ec:20:16:c6:c0:5e:5a:9a:
         85:fa:e2:dc:3f:09:a8:0d:ad:3a:9a:48:d1:77:4f:a1:f2:87:
         76:88:40:65:54:e1:6e:f1:97:68:5b:f4:09:2e:49:7b:1e:23:
         36:fa:ba:1c:38:0f:fa:fa:92:22:72:92:f8:79:eb:4f:2b:f7:
         ca:0c:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----