Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          xTNCIfD93cN2yTg7XiFQNZM2E5RCfnjjGWZy2Sn7zcM=
Subject key identifier:   F5:FF:68:6D:5A:3C:13:F2:B8:E0:82:BA:19:01:35:36:3F:5A:6B:14
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       01962E2AD2AD65595524F96D4F5BC4E1AC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: Ot2I8tWtN1lKL6A49WlXGnzvvPctZqSLK5cg+p1mpOQ=)
                          2: x_N3hpJtRSPWEjO0n6o6sQry1Jg.roa (hash: L4PUkpr3w+Sn4bU/wKaWhl8LERzOZYhflR9066iKXwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:ad:65:59:55:24:f9:6d:4f:5b:c4:e1:ac:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=f5ff686d5a3c13f2b8e082ba190135363f5a6b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:1f:22:b0:14:62:ca:40:86:79:bf:da:50:
                    40:33:a9:ec:e6:86:cc:b0:be:87:8b:d5:4e:2f:45:
                    84:24:bc:0d:71:e4:a2:c1:2e:e9:65:f0:76:c0:91:
                    1f:70:77:d7:25:7b:b7:3c:f5:a8:6e:26:54:07:e0:
                    7b:87:83:44:39:03:7d:e9:c7:13:41:c7:ac:32:ca:
                    3d:36:81:e9:f1:03:51:dc:4b:26:c2:59:72:98:37:
                    19:a8:15:74:d8:73:03:3e:02:af:63:a4:55:3f:c7:
                    f2:7c:c3:8d:da:2e:0c:a3:be:2f:5b:8a:b6:64:f8:
                    b1:9d:72:d1:51:24:49:29:f3:26:48:7d:06:90:d9:
                    e9:aa:01:07:ec:15:06:a9:04:d8:46:6f:a4:eb:fa:
                    fd:ab:1f:c8:e3:b6:9d:2f:38:15:09:04:3c:3f:11:
                    13:e6:5a:d1:83:cf:97:17:a6:c8:e1:94:67:9e:5a:
                    74:95:4f:dd:6c:81:5c:e4:d8:bd:4d:24:63:34:39:
                    89:fc:03:92:fb:a5:2e:f4:de:18:51:a4:d6:ad:d0:
                    73:68:e2:8f:9b:d2:d4:9f:3e:19:eb:07:86:e1:c9:
                    3c:30:fe:9a:f0:08:b2:6f:5e:22:35:ce:60:e4:ad:
                    e9:89:7c:55:af:5d:16:90:76:4e:f1:58:9a:3e:4b:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:68:6D:5A:3C:13:F2:B8:E0:82:BA:19:01:35:36:3F:5A:6B:14
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:50:78:de:dd:e8:e6:8c:f1:48:ad:86:00:e5:a5:d4:26:
         4d:fe:b4:65:74:71:1b:46:f4:c3:cd:58:33:34:b9:c1:c6:83:
         1c:2b:16:39:6f:6c:37:5b:10:9d:1a:62:ad:27:3b:56:33:d8:
         b3:e2:1a:3b:f3:35:14:8d:9a:86:fc:91:77:95:b1:1c:58:03:
         75:12:2c:8a:6a:ac:d5:81:79:fc:71:70:b4:47:18:dd:6b:c9:
         92:63:d8:1c:ef:54:f8:ca:e5:e1:5c:36:37:67:cf:8a:bb:8d:
         ca:b6:49:ea:1b:be:1b:6c:bf:de:ab:24:ff:cc:81:ea:10:d5:
         7b:75:16:f1:9d:9b:9c:27:2c:cd:45:27:1d:27:5b:6d:66:8d:
         95:be:da:8f:8a:3a:f4:64:63:e6:eb:ec:49:eb:f9:20:88:5f:
         cb:5c:4d:68:af:52:e3:89:2c:fe:4a:ad:c5:8b:54:f5:63:30:
         cf:9e:a5:44:f3:bb:01:fd:a2:f6:a4:8e:55:9a:c7:fb:98:23:
         d5:27:84:5d:92:cf:b6:90:96:42:e5:b6:23:fa:c7:ee:e3:9b:
         b4:f4:c7:3b:f3:65:05:9a:7f:17:69:6f:97:d7:7c:b3:4d:05:
         70:16:b6:2a:bb:61:fe:8a:65:1b:c0:cf:30:ba:0e:25:07:4a:
         6b:02:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----