Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File:                     5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier:          7uV4BxzF4oBl0bfNqk+e/BlndhJhyznvWUrzYj0YkJk=
Subject key identifier:   28:46:20:C0:E4:B9:4B:FB:CD:1B:49:BA:62:66:31:C7:B1:A8:52:22
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer:       /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial:       01962E99B6291E55202E13E2D8B077067729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: BTNmu4zWuEM+X5rlXjQ+dg34725NSH9GL6hvA5PhPIY=)
                          2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b6:29:1e:55:20:2e:13:e2:d8:b0:77:06:77:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=284620c0e4b94bfbcd1b49ba626631c7b1a85222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:62:5f:be:df:c0:ee:e0:18:dd:a5:15:4e:
                    1e:18:be:0d:22:a9:e8:d2:8a:2b:6c:79:67:32:71:
                    25:df:77:15:ed:85:c5:f2:23:5b:59:44:52:d6:d1:
                    3a:9c:70:11:d1:13:75:d3:01:4b:6b:14:3d:0b:8e:
                    ce:70:78:f8:5b:10:15:12:63:8e:06:56:ab:e6:f0:
                    0f:d0:f9:4f:2f:3a:0c:25:cb:63:b0:64:79:ef:4f:
                    6c:f7:00:85:2d:6c:2d:13:7f:d8:8e:89:ea:4c:30:
                    f7:79:48:76:ab:8d:77:fb:44:24:63:90:c1:db:12:
                    d7:38:de:a8:94:f3:7e:8a:af:a2:0b:bd:f1:4f:89:
                    ae:2b:88:48:8c:f3:c6:bf:d1:e3:b3:0e:e0:44:3a:
                    c9:c5:7d:15:d4:2d:4c:0b:c4:be:10:ad:9e:9b:2c:
                    82:70:72:40:8e:7d:da:df:00:98:93:80:9d:ba:45:
                    6f:29:5a:ba:ba:14:67:f2:c5:e6:e9:d6:23:82:2d:
                    32:e3:a2:b9:a8:98:87:02:2c:3f:6a:9f:9a:60:8b:
                    9a:ff:e1:5c:b7:39:ad:c7:04:be:8d:65:21:18:67:
                    2c:1e:0e:21:d3:6c:0e:36:c9:22:1a:57:50:7e:22:
                    85:2e:51:ae:a3:cb:85:23:96:bd:92:5d:2d:62:41:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:20:C0:E4:B9:4B:FB:CD:1B:49:BA:62:66:31:C7:B1:A8:52:22
            X509v3 Authority Key Identifier:
                keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e4:48:f3:81:bb:84:a0:89:75:aa:2f:8f:f2:81:ac:5d:5b:
         9d:8b:53:9d:57:de:22:32:2c:4f:73:98:07:bc:83:3f:f8:4f:
         26:96:12:29:c2:7b:4e:e4:9e:7b:24:34:a3:0a:20:b0:ad:37:
         3e:d2:70:cb:a4:e8:96:4a:dd:ec:4a:26:6a:e9:06:b1:46:3d:
         8e:ea:c8:fc:d6:f8:9a:69:59:1e:d9:89:a2:0b:71:21:21:ea:
         c9:59:95:9f:3c:7b:42:3b:62:5e:5e:13:48:3a:8f:2b:60:c3:
         ef:d8:f2:73:28:17:1f:e4:13:e8:36:52:4b:ec:1f:d3:33:e4:
         fe:5b:57:e6:53:b7:7f:37:4e:31:b4:35:b1:7e:c1:98:48:9e:
         87:4c:cf:55:0f:7c:99:29:83:da:78:25:31:66:c2:30:16:d5:
         86:0f:5b:3c:b0:3f:26:cd:26:28:2c:20:01:34:b7:85:ac:2d:
         60:7f:6c:db:0f:85:6a:87:64:c1:51:fb:0a:b3:41:61:68:d5:
         3f:98:c5:c4:25:4d:1f:95:08:14:85:9f:3b:1c:b3:da:1b:57:
         8f:b9:0f:d3:df:15:12:f9:6b:df:73:41:0b:cf:df:09:fc:aa:
         41:35:c7:22:c6:d8:25:36:f1:82:de:74:db:e3:3b:a2:48:ff:
         ff:06:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----