Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File:                     5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier:          q2W6bxnDj7oxIZ3VNPTHHUHBDPTAVjknnPkMSw/tXnY=
Subject key identifier:   5C:F6:D0:22:A5:61:B1:4B:5F:5B:B8:EF:83:E8:DF:D4:6A:34:2E:68
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer:       /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial:       01962ECFB6FE57469F263C6B50576CE476DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number:          123B
Signing time:             Sun 13 Apr 2025 11:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:26 +0000
Files and hashes:         1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
                          2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: vlnpc7TXIWs+438s2ShTOf1AO+6W35QBCQ9kLJ9o/GU=)
                          3: s0mRSNPGzNmp6WQ88QxkbOS9ktc.roa (hash: /+qWzxH2Ky85VShyjzGhO9D2cLW0/sLX7hqo1iX/VWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b6:fe:57:46:9f:26:3c:6b:50:57:6c:e4:76:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
        Validity
            Not Before: Apr 13 11:01:26 2025 GMT
            Not After : Apr 14 11:01:26 2025 GMT
        Subject: CN=5cf6d022a561b14b5f5bb8ef83e8dfd46a342e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:dd:8d:72:2b:1e:62:5c:dd:be:7c:cd:36:
                    c5:96:64:6f:9b:d8:0a:92:62:c0:a7:4f:c0:1c:6e:
                    27:fa:7f:da:5a:2f:4a:d6:9c:cc:98:94:85:18:3a:
                    e8:e0:b9:b2:a8:bb:28:13:2a:ea:38:15:f6:fc:a2:
                    8f:d2:46:15:5f:65:a5:f3:63:61:0a:6b:5d:f1:cc:
                    98:5e:59:58:ee:c1:2f:af:50:84:67:31:83:0e:74:
                    83:8c:27:f6:0a:77:cd:bc:f2:e4:41:6c:a7:a5:2c:
                    a8:fa:09:78:16:3f:28:cd:c1:8e:1a:2f:c5:90:d8:
                    ce:52:c3:f4:45:7d:1a:c2:13:bb:95:e6:3d:45:63:
                    92:21:56:40:33:dc:7e:d2:31:77:70:c4:1b:f5:9e:
                    e9:99:26:99:a4:2a:82:08:32:e0:61:d7:f5:2f:ef:
                    73:c1:99:65:a0:d0:54:94:24:d1:35:35:6d:6e:e6:
                    0d:78:71:80:4a:07:25:46:56:bf:e1:c9:89:3f:d7:
                    30:05:12:07:e0:06:1d:c7:30:9f:54:c8:10:88:d7:
                    91:a1:ed:09:98:70:85:61:37:75:af:e1:4a:cb:22:
                    6b:cc:07:b9:59:99:54:3e:14:c6:c6:dc:03:f5:3a:
                    89:ae:8f:b3:4d:05:67:30:a8:f2:27:81:2b:a9:02:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F6:D0:22:A5:61:B1:4B:5F:5B:B8:EF:83:E8:DF:D4:6A:34:2E:68
            X509v3 Authority Key Identifier:
                keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:85:1f:a7:d4:c2:dc:5c:f0:54:8c:24:54:28:a6:89:4a:92:
         6d:2c:9e:2e:81:63:48:76:32:c8:be:28:62:60:be:e1:1f:b1:
         93:3a:2c:83:f4:f8:c4:5f:10:07:5f:bb:12:87:c0:d5:e0:1a:
         c4:eb:3a:cd:cb:f1:b9:65:b9:78:ed:af:40:53:18:ca:27:0b:
         ac:35:f3:50:99:a8:d8:95:ca:02:22:99:3a:f5:39:9b:1f:e1:
         de:bb:62:40:d9:75:be:7f:2e:39:d3:2c:ea:dd:fe:51:7f:76:
         a9:c4:c8:59:f9:29:e3:3a:c6:d6:1b:a0:db:87:bc:9b:7f:24:
         f9:6d:e6:b7:c0:cc:5b:aa:3f:2b:72:0f:dd:02:e3:19:47:a7:
         5f:30:da:26:29:de:0e:f7:9e:52:4d:71:1d:2b:fc:b2:b9:e0:
         b4:f3:e7:fc:7d:1e:67:57:34:ed:07:76:fd:13:c9:02:64:48:
         35:b8:c3:28:f0:05:09:5f:ec:04:5b:7d:f7:58:6c:bd:95:01:
         16:1b:46:bb:04:0f:d9:8e:61:28:19:51:f7:e4:5d:7b:49:57:
         f3:62:8e:65:f1:10:2d:29:69:64:02:dd:ed:69:36:73:23:e1:
         e0:d4:76:b7:e6:4d:89:79:60:a0:83:8b:43:17:33:32:e1:96:
         b3:7b:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----