Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          RHDseju03GCGU7x/boLSuczoiHyMydsSLZ8qlxyDaEI=
Subject key identifier:   05:C2:F7:D5:6E:EB:2B:03:19:09:25:62:5E:1C:13:B2:3E:B0:33:59
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       01962ECF609FF7ED084182BFE532A1E2B361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          01D1
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: 73SufjFtlBHPmfa5TtayN9Hmga/qFQMCLEvlaFt0nII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:60:9f:f7:ed:08:41:82:bf:e5:32:a1:e2:b3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=05c2f7d56eeb2b03190925625e1c13b23eb03359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:95:e3:2f:ae:55:c0:b6:f5:13:32:00:30:
                    3d:c2:5b:32:04:32:e1:ed:28:fd:5a:b3:c3:da:fd:
                    8c:c9:0f:77:67:cd:bc:df:6a:b2:cf:8d:98:be:da:
                    02:af:f1:aa:3f:9e:74:16:a0:9c:2b:0b:88:6f:28:
                    f5:7c:a8:5f:cc:3f:0b:fc:15:87:c1:95:c6:5e:da:
                    37:f8:72:81:fb:aa:80:97:eb:78:fa:60:07:d9:57:
                    2e:b2:b5:ed:56:37:b0:86:ca:f3:ab:a7:ff:cb:84:
                    42:21:33:6d:0a:90:15:3e:15:b7:91:aa:e0:73:01:
                    b4:03:90:18:75:16:d1:f4:89:17:72:88:d0:57:50:
                    83:8e:8d:aa:34:3c:d0:cc:ef:ec:aa:bc:8e:b9:f5:
                    d6:3d:4d:cd:91:62:ed:1f:87:96:11:b2:8e:31:07:
                    f7:35:f4:95:3c:7b:77:bc:b4:67:d6:e4:3d:52:0e:
                    eb:03:06:c7:f7:55:35:bb:ae:2c:2c:12:52:b2:5c:
                    5f:72:27:5c:32:13:29:c6:11:94:87:7c:7f:90:04:
                    26:c7:e0:35:9a:f3:46:67:19:a5:fc:be:30:25:72:
                    9a:78:29:03:86:8b:5b:10:86:78:8e:00:ba:c1:7f:
                    0c:e6:59:e5:53:fa:11:b3:50:ee:84:26:69:d9:19:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:F7:D5:6E:EB:2B:03:19:09:25:62:5E:1C:13:B2:3E:B0:33:59
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:83:cc:da:ab:76:51:d5:e9:01:65:14:f0:15:21:ce:1c:
         a6:2b:59:f1:1f:51:3c:e5:6a:66:4b:43:98:19:64:54:53:a7:
         d6:14:6a:a8:10:15:3c:23:69:b5:ed:1b:c5:16:f0:61:19:9d:
         2b:a1:00:93:fb:3d:e2:83:bd:ad:8b:7c:12:8c:c0:f3:63:b7:
         d4:ba:56:5d:d3:b4:96:74:4d:b6:0c:9d:98:db:d1:4d:e9:d8:
         9a:f1:e7:4d:18:6e:c8:3b:02:89:a5:c2:b0:53:c0:36:20:de:
         ec:f1:97:4c:9b:4c:bb:a7:b2:9e:e6:91:81:02:22:8f:6e:0f:
         ad:e9:4c:9a:54:64:b9:93:98:96:58:e2:8e:9c:e9:18:96:39:
         40:b4:50:94:91:ef:cd:73:6c:54:46:f6:d1:91:6e:4f:ed:af:
         d4:6a:ac:51:98:00:7c:27:e4:f5:c5:a5:dc:3b:ef:9e:34:e7:
         6e:ce:b8:a3:27:71:68:a7:97:ad:28:d0:29:b7:18:1b:ee:b6:
         e5:2c:9a:cc:06:82:1a:f2:a7:d1:49:c7:97:c4:94:3a:51:a1:
         a5:ea:20:45:93:9c:c4:40:82:a2:03:e3:ae:38:32:8b:4a:f1:
         08:58:7e:ef:19:43:90:c6:58:80:9a:fd:74:cc:7b:55:6a:b6:
         34:24:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----