Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File:                     5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier:          A8g13g8d6qZeERssZkdwme/5+nnSX+q1I0hv5JX1A0A=
Subject key identifier:   82:CA:29:8F:5A:46:56:42:92:55:C2:3E:E3:5A:AA:06:03:73:84:DA
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer:       /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial:       01962E618164AD4701E2617C8A6A27F0FF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number:          0275
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
                          2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: 3fsAorPvN0juMNpHNTImv7rHSqNXY0ZTJKmBX2b9yfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:81:64:ad:47:01:e2:61:7c:8a:6a:27:f0:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=82ca298f5a4656429255c23ee35aaa06037384da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:d5:f7:dc:1f:d8:8f:f4:0f:1c:9f:4b:76:
                    66:1f:6d:bc:0b:ae:11:7e:e3:9d:52:1f:8a:83:60:
                    57:ce:b3:17:4f:3e:ae:79:3e:ca:d1:dc:e4:48:96:
                    24:6c:a8:b8:21:c3:6e:c9:98:12:75:11:67:0c:07:
                    b9:f5:4e:16:a1:92:24:72:9f:50:22:d3:9a:6b:2c:
                    8b:7e:a3:9e:2e:60:19:ea:38:ad:27:3a:19:65:08:
                    e7:09:6c:c1:0f:33:67:2b:91:4b:8c:51:da:a3:00:
                    56:04:28:f5:99:dd:85:70:d4:78:81:a6:bd:fc:2e:
                    9f:72:2e:60:28:dd:11:b8:aa:7f:a2:f6:ff:59:98:
                    b2:b9:43:c7:a6:6a:89:7b:db:b3:94:46:d4:d7:b9:
                    af:99:9f:fe:dc:c6:25:db:17:a9:ae:c6:a2:ef:04:
                    c9:7c:6b:a6:32:bc:a2:64:40:99:db:e4:16:2c:90:
                    db:e5:f2:7d:9a:39:f7:eb:1e:a2:5b:16:d5:f4:9e:
                    b9:12:19:f5:08:23:e6:4f:26:25:1f:fa:a9:3a:dc:
                    5d:bf:f7:31:78:d2:54:08:30:30:8c:0d:14:42:73:
                    1c:ec:6e:04:76:30:77:19:88:0d:9e:1a:19:20:a2:
                    f9:91:74:fb:8c:2a:ba:63:f8:e8:44:e3:3e:1b:79:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CA:29:8F:5A:46:56:42:92:55:C2:3E:E3:5A:AA:06:03:73:84:DA
            X509v3 Authority Key Identifier:
                keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e8:96:1e:90:5f:a1:49:31:d7:b2:d7:06:09:ab:ac:c7:23:
         7a:50:1f:c7:f8:a2:e8:a7:c6:8d:29:79:c6:75:c5:67:1a:d4:
         7a:6b:27:1f:61:23:a3:fc:58:a7:c5:d8:4a:b8:e9:30:77:e2:
         08:88:54:4e:cc:24:e0:e1:bd:b2:65:43:c7:55:22:60:53:a8:
         da:76:5a:f3:31:1e:c9:c9:29:10:60:77:61:32:63:b1:ac:46:
         40:44:3d:ac:64:98:48:55:90:8c:5a:65:d2:27:d5:5a:65:1a:
         bf:1a:97:02:bb:67:7c:52:cd:9a:af:9e:9b:16:4c:30:c3:6e:
         db:e0:19:01:1a:77:74:c7:bd:ee:f9:53:71:71:61:3a:16:47:
         71:d6:e2:82:80:e6:4a:2d:93:89:39:1e:5e:19:89:d7:96:ef:
         93:d3:75:84:2f:e4:3a:98:0c:7a:c8:8b:9d:4d:e9:4b:04:35:
         13:b8:16:3d:f9:e1:21:36:e4:1a:52:be:0a:55:5b:bf:f7:a9:
         cd:33:9b:de:cb:29:fb:29:75:6b:fc:8f:3e:15:0f:07:e0:c6:
         e8:7c:6d:7f:da:7d:19:6e:0d:24:c9:e3:ce:1e:9f:38:40:e9:
         95:16:8c:d8:8b:bd:21:0a:e4:1c:bb:dc:93:50:07:2e:8e:07:
         68:5a:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----