Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File:                     f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier:          oINbR4zKVccgw51DLRd4p7Thg9WUHrj0W+BT1J+Oblc=
Subject key identifier:   F5:44:48:73:6F:8D:97:BD:BF:D9:68:C3:64:23:DE:87:38:5B:0D:3E
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer:       /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial:       01962E2AC6ED40F0B008AFAA3AA4C523CED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number:          0AC9
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: NmU+2WaE3YwJm2iMCafYmYoAIda6th3dhaXEqGSBdS8=)
                          2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c6:ed:40:f0:b0:08:af:aa:3a:a4:c5:23:ce:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=f54448736f8d97bdbfd968c36423de87385b0d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:94:9f:75:ff:5d:0a:a1:12:6a:3b:34:bc:
                    43:3b:72:9e:88:39:8d:71:b6:0f:3e:79:b3:fa:3e:
                    de:02:d7:36:7d:a8:3b:d6:13:b9:a4:0f:80:5e:c0:
                    c6:71:b7:e3:01:fb:30:40:ab:bc:6d:f7:63:ff:db:
                    1e:bd:2c:99:29:8a:63:18:35:04:21:4e:3e:02:aa:
                    78:10:5a:68:b3:c4:51:06:dd:ad:69:60:8b:a3:a3:
                    16:95:95:bb:49:68:cd:07:0d:b7:a0:8c:83:02:11:
                    3c:ba:0d:d5:63:24:db:02:c6:29:0f:0a:e0:6c:7b:
                    f9:7f:a2:28:c4:07:c6:8b:c6:7b:58:92:33:97:8a:
                    28:a3:38:cb:06:fb:7d:00:02:4a:e2:b2:ca:08:db:
                    64:95:d8:bc:76:9a:18:c0:3f:0d:2e:7e:dd:fa:20:
                    88:5e:bc:a8:84:54:09:17:28:e0:86:44:90:4c:c2:
                    2f:bf:cf:cb:d2:96:f6:b8:b7:06:86:52:f5:ad:59:
                    b7:f8:1a:e0:2e:06:5e:12:c6:f9:c6:8a:f4:48:9d:
                    be:2f:e9:80:8d:73:9a:41:a1:bc:c0:62:b0:99:e1:
                    39:84:a0:6c:61:58:7e:7d:c4:36:b7:c7:39:15:99:
                    30:02:ef:cc:e9:4c:d3:e4:f8:f6:dc:65:03:f6:1f:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:48:73:6F:8D:97:BD:BF:D9:68:C3:64:23:DE:87:38:5B:0D:3E
            X509v3 Authority Key Identifier:
                keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fa:02:ae:d5:9a:63:44:f8:5b:89:d5:c5:af:aa:03:6f:87:
         de:e8:a0:5f:ba:87:83:a1:dc:7a:b9:e7:64:de:4d:af:fc:a4:
         4b:d9:47:57:7d:b3:37:22:2b:20:3a:9d:ad:3a:a8:b4:25:5b:
         2c:28:4b:5a:76:7f:d1:60:1b:f7:aa:97:95:ca:a9:a5:09:9c:
         e2:8e:13:39:c8:04:d6:21:62:37:eb:3b:33:b9:b0:4f:ea:79:
         e9:cb:e5:6b:bc:1b:11:36:d2:01:80:e1:09:7a:d2:e7:dd:89:
         0c:66:47:6f:45:0d:0e:0b:2f:e8:f9:7a:82:3c:14:52:d9:f6:
         d0:ff:74:b8:0c:fc:59:8d:22:c6:d9:34:80:6b:93:b2:2d:5b:
         8f:08:c3:74:f6:2a:18:3c:85:32:1a:b8:f8:d6:4a:4b:20:4d:
         65:91:63:c8:a8:79:ec:30:71:80:71:c1:3d:ab:e2:32:06:1e:
         c1:94:c2:74:05:25:6e:b3:e2:a3:57:bb:8b:5f:4f:00:d4:50:
         8f:cf:83:7a:9c:38:b6:3a:c9:ae:e0:56:5d:c2:e7:47:dc:29:
         78:ea:35:39:92:0a:2e:a0:8c:81:18:26:69:26:eb:5c:ae:5a:
         56:eb:2a:8a:13:73:42:8d:07:71:69:00:38:78:f0:ca:89:b9:
         a2:3a:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----