Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          ynI9/XiSiwEiBoIICFN8xbyRxB/je2qAPcig/e3q1xw=
Subject key identifier:   4A:95:60:0E:A6:E8:66:03:95:19:B0:33:16:E3:8D:3C:F8:78:AE:0A
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       01962E2AC5FC960BEDF7084EEAA66C489519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          0D5D
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: UZ3VF+IHaY6owIZJFJs8g306sGqg57OgqZFsdRipECQ=)
                          2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:fc:96:0b:ed:f7:08:4e:ea:a6:6c:48:95:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=4a95600ea6e866039519b03316e38d3cf878ae0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:68:12:d4:5c:3e:52:5b:a6:8c:c7:89:3f:
                    f6:eb:6e:b6:99:2f:45:64:98:8a:d6:74:da:7e:d6:
                    b3:ea:7f:ef:7e:05:89:b6:b0:ef:b4:58:49:30:28:
                    f1:71:4c:98:1d:66:14:11:f4:09:6b:16:18:1a:8e:
                    a3:35:05:f4:f4:2d:e2:6d:e2:43:5d:ea:8e:b4:2a:
                    84:f3:4f:77:65:d8:f1:27:f0:5d:54:6d:a2:02:99:
                    18:aa:8b:af:c2:1d:4c:fe:60:b1:54:42:94:5e:e0:
                    fd:bc:b3:b4:70:a6:b4:dc:01:4b:4c:23:68:27:07:
                    5d:7e:ef:a4:20:85:fa:ba:78:85:27:15:bf:5d:4b:
                    00:ae:c9:56:e0:8a:6a:74:7d:e0:f6:73:c4:4d:fd:
                    13:7e:54:3c:67:36:e5:31:dd:bf:ba:76:9c:16:ab:
                    47:ac:37:9e:a6:ea:8e:9b:ab:09:b0:b8:d3:e9:aa:
                    fe:7b:e9:9c:b7:66:a5:1a:48:33:d7:41:83:43:4e:
                    33:5d:d9:fb:f9:3d:41:4d:7e:e5:46:73:20:34:9f:
                    73:da:a9:7a:f1:cd:9b:7c:dc:37:44:ed:92:4b:be:
                    94:04:aa:b1:b2:f5:e8:2c:52:af:53:29:7c:a5:1e:
                    08:9f:75:25:73:eb:d3:e0:75:ef:9f:0b:c7:04:15:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:95:60:0E:A6:E8:66:03:95:19:B0:33:16:E3:8D:3C:F8:78:AE:0A
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:a1:c4:77:71:90:48:05:91:67:f9:c9:11:a3:e5:8a:3d:
         81:d1:17:b3:e5:ae:e7:97:02:8c:c5:90:1d:f7:61:66:4a:e2:
         4f:91:5b:65:8e:92:67:c0:5e:82:9f:ba:57:7c:5f:70:74:73:
         18:11:0c:a3:52:3b:6b:10:18:cf:ec:0f:b2:0a:9e:bf:46:d6:
         d5:b1:ac:73:d6:0e:02:c4:4c:28:5b:0e:7a:85:9e:46:39:29:
         2e:9b:a5:c0:a3:0f:50:53:56:f9:51:ac:e6:e8:c6:13:6e:7d:
         de:b1:04:c8:40:f4:61:8c:77:3b:6c:75:21:1d:8c:e7:0c:37:
         0a:fe:14:d8:d8:ee:4f:0c:1f:e8:01:24:22:a5:5f:ed:67:2c:
         4b:36:54:4f:dd:ed:57:7a:94:15:ee:a0:28:ff:14:a1:d3:77:
         e2:2f:3b:b6:90:24:7e:b0:a7:4b:86:2b:7a:0e:81:0f:12:ac:
         ce:06:8f:d9:68:ef:0d:b2:54:4a:a6:52:c2:a4:d1:9b:1b:3b:
         b7:69:98:a0:df:92:51:64:da:3c:00:c6:c2:8b:50:0e:82:70:
         48:42:b1:2d:ff:b0:83:72:44:9e:c9:75:0c:6c:5c:bd:00:2e:
         fd:2f:60:bf:d3:52:9b:4d:0d:6a:d8:40:4e:e7:5e:33:11:ca:
         ee:97:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----