Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File:                     _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier:          PElBEKlAYtRVI8ZIunwdH2jkbi1/NISMTHqJ2REaYsE=
Subject key identifier:   8F:3E:25:62:D9:3D:C4:BE:F6:E1:03:2B:81:04:72:A8:DE:A7:FB:9E
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer:       /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial:       01962E995EFA23E32D3F0058649A6575E1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: uyNofOORzRjF7pVRL/W8rzPTogDKx/skb28Y1OzCZ5Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5e:fa:23:e3:2d:3f:00:58:64:9a:65:75:e1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=8f3e2562d93dc4bef6e1032b810472a8dea7fb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:c1:54:61:fe:8f:fa:c3:65:80:b9:37:db:
                    90:d6:89:74:e5:17:84:4c:3d:45:25:fa:93:5c:9c:
                    d9:69:39:e4:e3:d0:d6:dc:5b:4d:dc:5b:ab:ba:a1:
                    4a:16:9c:3a:92:02:87:58:b7:5b:c8:e8:eb:94:ca:
                    71:5c:b8:f1:5b:0d:fc:4c:39:09:48:97:c8:d7:a7:
                    f1:a7:86:ee:1a:34:fa:f4:fc:8d:86:37:3e:3e:aa:
                    8b:b8:01:68:24:9a:13:9d:00:53:c9:76:6c:45:74:
                    47:af:90:58:8d:05:80:1f:50:52:6e:da:21:78:af:
                    2c:bc:b5:ed:f2:6a:6a:01:90:cb:10:ba:66:42:71:
                    62:d8:3b:04:5a:fe:7a:c6:17:c6:29:aa:11:71:4f:
                    26:8c:ce:00:84:7e:ac:56:d8:b4:9f:47:33:e0:92:
                    93:87:51:33:19:79:2f:17:e9:6c:fb:f1:3a:b3:19:
                    51:40:1d:24:5d:a4:a5:65:55:86:d3:5c:ff:e1:6c:
                    cf:94:9a:19:e2:5d:3b:98:eb:db:ef:1e:cc:5d:1c:
                    e5:fd:a2:bd:8d:39:6b:f5:95:ea:61:65:97:56:6e:
                    34:6b:0b:25:ba:d1:fb:56:c3:3d:ed:d6:32:dd:1c:
                    91:8e:ae:d4:6c:cc:96:30:5d:f7:2b:3b:c7:3a:8c:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3E:25:62:D9:3D:C4:BE:F6:E1:03:2B:81:04:72:A8:DE:A7:FB:9E
            X509v3 Authority Key Identifier:
                keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a9:5c:72:ae:b1:33:7d:a4:9b:1a:4f:62:0a:7b:eb:ed:78:
         db:3e:d6:42:6f:5b:7b:47:f3:75:ca:4b:cc:48:87:4a:cd:97:
         b0:d6:f1:36:8a:5f:b4:7d:22:a1:bc:1d:e8:b7:ab:70:07:24:
         77:dd:63:ba:9e:8e:7c:6d:f0:33:a2:14:95:c0:ea:04:20:26:
         e5:39:8f:3a:d0:13:92:34:bf:38:cb:d1:1d:b3:73:ee:57:c9:
         be:f1:0a:17:0a:84:0f:f9:5d:33:27:41:14:b2:a6:c6:e6:6d:
         21:02:fe:62:90:53:24:ba:4d:cf:8b:49:61:cc:70:45:cf:f1:
         6a:6e:b5:a6:17:e6:63:23:1a:cf:f8:c3:5b:ba:5e:6d:b4:f0:
         18:8b:64:08:f2:4c:87:a9:c4:64:8d:a9:a8:88:d2:f1:05:be:
         e4:b5:e4:37:14:52:e3:a1:06:e4:18:33:49:67:23:b3:5e:ef:
         cc:46:da:d0:a8:6c:9b:9d:7b:fa:c3:85:b1:89:9f:ce:3a:7a:
         28:05:8b:f9:da:7e:e4:45:09:34:84:2d:c8:68:2b:da:ff:7f:
         fb:83:d6:1b:bc:de:e7:ae:47:13:f0:47:77:00:52:07:4d:1d:
         e1:4d:ce:97:e2:9c:ef:7c:bc:83:43:cc:bb:f7:cc:86:75:65:
         32:0a:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----