Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          l4pPZtx1YvcYbCwl2vOt7qOwkRZBZIwaXgsYTGMjDMA=
Subject key identifier:   85:8C:37:8C:E5:17:A4:99:EB:54:E5:74:7A:34:BB:6E:C8:2E:0C:74
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       01962E98CD6AEB31DEF14624A5B683C9AB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: 57rA/Mzms/NhOaaTox4avYYG3FOL748FEgpCQtfXA1U=)
                          2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:6a:eb:31:de:f1:46:24:a5:b6:83:c9:ab:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=858c378ce517a499eb54e5747a34bb6ec82e0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:81:3f:ed:79:3e:7b:67:27:cc:c2:94:54:
                    6e:31:17:ad:2f:af:56:b9:25:aa:b6:98:bb:e9:d7:
                    3d:e9:d2:e8:e1:b5:ea:50:a3:6a:08:be:c9:3e:cc:
                    30:68:b9:58:5b:93:0a:4a:b3:62:5b:c5:94:c1:f4:
                    8d:5d:fe:bb:d4:42:d1:88:c2:bd:3c:f0:4e:b0:a4:
                    53:98:89:1b:97:97:f5:61:42:84:b7:2f:5d:17:f1:
                    89:51:7e:03:2e:9e:bc:29:3a:c0:66:67:d0:bf:f8:
                    48:49:52:ca:7c:f9:ac:ec:e9:8d:42:20:30:cd:1c:
                    e4:23:4d:cb:d1:71:b3:b6:66:ea:fc:16:b8:7a:02:
                    52:9a:dc:3f:1a:97:84:57:4b:d3:1a:63:dd:f9:6a:
                    b5:fe:a6:48:f4:6c:d6:c6:0f:cc:18:81:9b:ab:45:
                    a1:99:05:3d:22:ee:03:c2:d8:c0:84:07:e6:5a:e4:
                    cc:eb:46:4f:6f:d9:a0:98:13:4d:2f:54:a0:45:73:
                    0e:d0:28:9c:c0:72:8e:69:2a:94:33:8c:c9:41:f0:
                    fa:08:af:2c:9d:4b:eb:09:dc:95:b2:44:dd:37:ef:
                    f4:e7:22:2d:8e:0e:42:be:fc:58:46:b0:40:10:6b:
                    ff:aa:fa:cc:92:21:b0:15:3e:64:02:6f:3d:9a:0c:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:37:8C:E5:17:A4:99:EB:54:E5:74:7A:34:BB:6E:C8:2E:0C:74
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:b3:b0:c4:c1:15:86:69:91:f5:51:83:5a:a2:f2:b5:49:
         f7:60:78:7c:4d:4a:ae:88:8c:28:2a:49:40:ae:af:83:a2:b8:
         01:3e:9d:65:06:11:3f:81:a2:b0:8f:5d:28:fc:6b:25:2d:eb:
         e6:02:e0:2c:d3:a3:56:86:29:50:4d:79:78:b8:09:58:9c:43:
         a6:bf:4d:1c:90:01:89:e8:31:97:d8:28:1a:6a:f1:a3:5a:7b:
         1b:cb:96:bf:58:09:01:8a:03:85:5b:b9:17:5c:48:65:d1:30:
         57:d6:77:0a:d6:10:81:11:09:60:d8:65:81:31:6b:9a:5a:86:
         f6:48:6b:12:e2:dd:55:db:04:e4:15:b8:f5:cb:d0:1f:24:7b:
         d5:ae:8e:b9:87:20:d5:dd:d1:6c:d5:90:c8:a0:da:4a:17:63:
         7c:91:41:01:60:9b:72:1f:19:2a:d7:a8:10:9b:23:d0:9c:3e:
         16:98:4f:7b:2e:45:53:18:ff:b0:71:d0:ac:3d:8c:39:fe:e5:
         68:7d:9b:0a:77:eb:f1:b9:91:ef:81:9b:e9:26:82:ad:a0:d4:
         a6:df:1d:46:2a:5c:ae:f9:ec:58:65:c6:b3:9b:70:11:91:86:
         bb:89:9d:6e:c2:bb:bf:3b:1b:26:f8:86:42:3d:60:59:d8:72:
         6b:fb:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----