Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          hiDzeixvza0eofiWPJXFV0KMafZgWhJskf7Sfq4OAjM=
Subject key identifier:   3B:9A:47:B3:33:B1:DE:33:F7:56:9D:33:79:D8:2A:70:55:8F:40:D7
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       01962F071CC302D66E219624948DD05031F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
                          2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: y6X23A2abR2+u2SLMbaPYLDUlThT2YeBG7XQV5Ld5vk=)
                          3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:c3:02:d6:6e:21:96:24:94:8d:d0:50:31:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=3b9a47b333b1de33f7569d3379d82a70558f40d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:2c:ca:79:d9:3e:0e:a4:a7:6d:7a:94:d2:
                    66:74:16:89:d5:ae:58:ae:7f:09:1d:2b:b1:7e:13:
                    7b:c6:91:33:1a:56:6d:f0:18:11:ff:ff:e0:dc:d2:
                    1c:af:98:94:5f:44:9e:5e:7c:d8:d4:b3:3f:bf:52:
                    ec:e7:ff:72:a3:3f:37:d3:7a:03:b4:89:0f:ad:5e:
                    09:89:91:d2:7b:ef:13:9c:17:d4:16:2c:06:b1:cc:
                    77:7a:87:2c:9d:65:a8:a2:6d:e0:21:9e:f9:22:bc:
                    a0:04:7f:06:32:36:73:b7:d0:44:b8:b4:e9:a4:a1:
                    47:62:a1:94:c2:26:97:0a:89:3e:2f:e3:a5:c0:8a:
                    51:fa:44:29:3c:ae:55:b9:a3:63:2d:59:77:fd:44:
                    2a:2c:4f:bf:a5:80:07:84:78:43:17:12:45:6a:9c:
                    01:38:cf:2b:e0:66:b3:c0:db:0b:25:e9:4e:03:da:
                    b5:39:87:39:96:af:e3:c9:73:51:7e:5a:13:8a:9f:
                    42:74:9c:0d:15:8a:e5:6b:00:50:58:70:f0:50:af:
                    ce:66:7f:f5:f1:24:a6:64:1c:ae:b4:fe:eb:b0:62:
                    2a:b6:f4:f3:fe:e3:20:99:94:80:a0:7a:96:53:da:
                    3e:99:1b:92:5b:8d:22:cf:a4:d9:2e:e3:a9:c3:46:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9A:47:B3:33:B1:DE:33:F7:56:9D:33:79:D8:2A:70:55:8F:40:D7
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:fc:d3:2b:48:54:2e:14:1f:d9:f0:65:b8:fa:fd:fe:2f:
         99:9e:0e:8b:79:c8:dd:2e:54:77:c9:e6:47:13:3e:10:7f:fd:
         0a:c7:ae:87:4e:91:27:68:75:1c:2f:df:73:7b:22:51:0b:97:
         ff:ba:96:1d:0d:e8:e7:be:51:d3:b8:bf:d4:6f:41:21:92:c7:
         4d:de:7b:ea:ab:77:22:ba:1e:8f:52:3b:3b:ed:53:73:61:46:
         42:4d:e6:cf:7b:5b:55:5a:64:bb:e0:e2:38:76:b6:68:bc:27:
         42:5a:fe:62:dd:5c:4d:4a:b5:c5:b4:a7:b0:e1:dc:7c:57:ce:
         00:47:c9:af:55:18:0a:78:0a:f6:6a:9c:7e:27:e7:1c:59:f8:
         10:02:20:e6:10:18:59:e5:df:20:bc:b5:8c:e3:f7:e0:fe:b7:
         1b:b4:63:c9:7b:a6:3d:61:de:f0:48:f2:20:89:8c:56:54:59:
         ca:96:06:96:46:09:0b:b8:87:5f:6a:c3:b1:35:ae:0c:2e:74:
         75:dd:2b:c0:14:0b:6c:a5:0e:f3:10:c5:cf:14:16:6f:59:87:
         d3:5b:d6:c5:89:08:1b:41:aa:63:7d:08:67:45:72:f3:dd:a5:
         c8:e4:84:db:60:e4:03:c0:2e:19:15:39:d8:16:5d:ab:70:ef:
         7b:d4:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----