Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          98OzL6DV9lF9HB7dIdUmFjWFGAZjzD0htp/YoCSedmQ=
Subject key identifier:   41:52:01:00:41:BE:6B:39:53:B2:F7:12:A7:55:20:8B:9A:76:25:DA
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       01962F74659B0F89106B7DFA4E1A9AFA10FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          11D5
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: otYjtl6nkDD3zjoL/ntrLmj+yaJp0grav6bzPoOREVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:65:9b:0f:89:10:6b:7d:fa:4e:1a:9a:fa:10:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=4152010041be6b3953b2f712a755208b9a7625da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:8d:f7:83:92:ae:f2:2d:52:39:e0:83:5f:
                    11:00:27:52:e1:84:03:39:c7:94:3d:74:28:90:62:
                    79:a1:40:57:3c:de:19:31:2b:30:9d:be:30:91:f3:
                    30:4f:9b:38:f3:66:8c:6e:df:25:53:4b:da:ef:71:
                    1b:03:40:39:25:71:89:8f:1c:ad:f8:6c:6e:1b:5c:
                    3a:53:51:98:c0:c7:b0:11:1a:8a:76:02:d7:07:73:
                    1f:8e:cc:86:90:ca:90:52:2a:27:0d:19:3e:e8:c5:
                    37:85:34:3f:02:93:d2:22:3e:70:02:c9:32:6d:d3:
                    c1:c2:30:ce:6e:28:c9:06:82:42:52:fb:65:09:38:
                    d4:e9:da:be:45:e7:56:27:6c:79:f9:59:df:dd:04:
                    8d:af:32:ab:c7:ba:84:42:6d:9f:51:b1:21:ed:fa:
                    6e:3b:fc:43:5f:30:f9:80:0f:f7:7d:1f:c7:c0:06:
                    79:a3:b2:b3:31:ca:0d:5a:07:3d:56:e1:8d:98:1b:
                    b2:84:b8:2b:91:e6:a8:2b:93:b4:85:a3:db:aa:44:
                    f7:d7:2c:16:21:27:2b:ad:10:15:94:2e:33:47:91:
                    d0:fd:9b:ec:88:ce:1c:02:6e:46:9b:13:4b:d2:5e:
                    7f:1c:0e:f8:fa:1a:a8:3d:e2:ee:8d:75:ad:9f:9c:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:01:00:41:BE:6B:39:53:B2:F7:12:A7:55:20:8B:9A:76:25:DA
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:4b:3e:9d:17:d5:21:2e:41:41:75:0e:01:cb:97:cc:26:
         4b:56:93:6c:46:86:b3:3e:01:f5:02:5a:43:d5:41:2d:47:04:
         0f:05:28:90:c2:85:fc:17:e6:cd:ef:f0:01:21:d7:d9:47:54:
         55:bb:4e:cc:e1:9a:e8:75:c0:ec:f8:0d:c6:5b:41:f8:37:54:
         d8:7c:29:dc:65:4c:e3:0c:02:c6:61:8f:e9:b8:09:f6:7c:42:
         3e:58:29:00:aa:37:fb:fe:36:32:01:a9:75:21:a6:3f:39:aa:
         26:dc:b1:ce:8e:fd:27:59:a9:41:b9:4c:d8:41:fb:f1:0b:c7:
         2a:34:81:0a:43:1a:e4:89:7e:a2:c9:0f:c3:ba:e9:98:77:2e:
         02:64:03:91:ad:5a:ac:77:5a:25:91:28:48:44:7c:3e:96:70:
         c3:16:9f:3f:33:42:d0:61:c0:e0:68:b5:7d:82:d6:31:0d:99:
         a9:c4:63:5c:3e:3f:e0:6f:62:59:dd:32:8d:a8:86:c7:c1:50:
         62:b4:e2:09:f7:6d:5e:c2:76:57:43:b0:b1:67:ea:35:62:8f:
         16:be:ba:39:78:49:98:5e:ce:af:ce:39:e1:d6:88:d0:ad:a3:
         60:3a:ba:b3:e9:3a:b7:2e:c1:87:9e:16:44:0c:ad:6f:25:8f:
         64:57:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----