Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
File:                     5fmFqUAlRIkU3qoXQiBzBDklE90.mft (raw, json)
Hash identifier:          IqK/jll/anGJUc+O/9N0UP0MMWzkHosgSlL9aNnB7iY=
Subject key identifier:   7B:6F:57:72:B8:B6:99:10:E2:D4:13:9F:21:7C:ED:E8:B3:D7:F9:F4
Authority key identifier: E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD
Certificate issuer:       /CN=e5f985a94025448914deaa1742207304392513dd
Certificate serial:       01962E61E55029D603D6F1B3D0F98E6C38CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft
Manifest number:          BB
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 5fmFqUAlRIkU3qoXQiBzBDklE90.crl (hash: HWZb08kiv6TLPXe/KHefip2gvHjLk2TQsAKkpArpqLM=)
                          2: nAZJBZ6VvJoN3Mjanp3D7Pbl_-s.roa (hash: toI1tT2hR8zRYJnuO8W3FR+ZELFSDV5ej6CQ6AsxKnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e5:50:29:d6:03:d6:f1:b3:d0:f9:8e:6c:38:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f985a94025448914deaa1742207304392513dd
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=7b6f5772b8b69910e2d4139f217cede8b3d7f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:35:9b:29:96:a4:6a:5c:04:1e:dc:2d:09:
                    9c:c6:fb:ea:5c:0d:2b:c0:b6:86:97:9f:d0:ec:47:
                    be:b0:46:b3:69:1d:e7:05:32:21:85:fc:f7:9e:f1:
                    79:e5:c8:f0:c0:dc:98:85:0a:45:13:9f:a8:12:23:
                    8f:63:be:a3:55:6a:41:4d:c2:c1:c5:6f:82:14:15:
                    4f:a1:0d:41:6a:5d:6e:71:a9:92:e8:40:1b:37:c4:
                    17:0d:1f:9e:a0:76:d8:b8:02:c7:45:64:c8:11:c6:
                    7f:2b:9f:45:97:61:3f:33:3e:85:f5:a7:8d:00:8e:
                    c9:0c:47:95:11:03:56:55:47:a4:20:a7:8e:af:8e:
                    6a:50:6a:70:b8:9e:30:87:f5:f2:80:ff:5a:30:17:
                    e2:71:19:0e:46:3f:ef:0a:9b:ae:4e:8d:b4:78:2a:
                    25:ef:7d:c0:37:84:4d:6d:dd:73:61:d7:f4:4e:83:
                    8f:ed:43:0e:2f:bb:85:6a:8f:e4:ca:10:26:ca:fa:
                    67:54:bf:9a:86:72:97:e2:77:96:a6:12:11:c7:54:
                    f4:7b:b5:a5:81:e8:94:f8:7d:16:03:d5:5c:8a:71:
                    12:8d:cd:ab:90:c6:0a:72:a1:9c:2c:26:66:d4:d3:
                    d0:f2:d1:b8:23:6f:ec:2b:4b:2a:e2:23:4a:52:ec:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:57:72:B8:B6:99:10:E2:D4:13:9F:21:7C:ED:E8:B3:D7:F9:F4
            X509v3 Authority Key Identifier:
                keyid:E5:F9:85:A9:40:25:44:89:14:DE:AA:17:42:20:73:04:39:25:13:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmFqUAlRIkU3qoXQiBzBDklE90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ba1c97-0e56-4840-b613-b361a2c457c4/1/5fmFqUAlRIkU3qoXQiBzBDklE90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:f4:d7:41:97:b0:5a:be:13:05:9b:fd:1c:c6:7f:1e:c9:
         12:be:1a:f1:25:a6:c6:95:ad:58:d8:84:5b:90:61:29:37:97:
         13:8c:ab:40:9c:2c:5d:27:d9:83:c4:fc:b8:df:30:2c:f6:7b:
         5a:c2:8d:76:22:e8:4d:c8:c3:62:c0:76:fb:8f:c0:c9:3f:dc:
         75:58:2c:52:8f:46:e7:ea:4e:21:55:39:57:a9:25:cf:00:80:
         9c:72:96:5b:ac:82:47:2a:5f:b7:d3:39:f3:26:38:7d:f9:9c:
         03:65:a6:81:56:2b:b6:94:7d:44:f8:68:76:e7:fc:72:d1:2a:
         aa:30:a6:c5:33:8f:23:b3:65:1f:7b:34:5b:b7:61:ae:c6:62:
         ab:a8:5b:59:23:ac:11:0b:b6:fa:aa:0b:0c:44:84:17:1f:a0:
         fa:fa:33:18:13:8b:71:a8:fe:ef:8f:90:10:51:8c:0c:a8:7f:
         b9:fa:6d:b4:42:f9:b6:06:4e:d3:b7:b5:f8:98:12:36:a1:49:
         5e:7b:21:e2:eb:51:74:1f:ee:eb:c2:11:89:91:62:45:87:42:
         e4:ba:bd:0b:9b:6c:ac:77:74:6b:ed:b8:e2:ae:84:6e:75:70:
         f8:e5:74:58:3c:97:2c:fe:78:2b:09:4c:63:c7:bd:db:23:b5:
         0a:f3:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----