Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          Kvm5HzGaiElpZYlBd7XhePJXkfmKR19Sl0yS2LKb9D8=
Subject key identifier:   EB:FE:95:E6:6E:5E:DC:6A:DC:7D:F3:43:79:71:E0:66:82:61:C8:D8
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       01962E9907B13BCD21CD2C06C223FBF08AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1503
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
                          3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: cuoX7BZ0mqiFkLYY+T6oVXFoG4s4lBx43UBbKXmK7os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:b1:3b:cd:21:cd:2c:06:c2:23:fb:f0:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=ebfe95e66e5edc6adc7df3437971e0668261c8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:5a:0c:17:67:e9:77:eb:7c:65:f1:c9:5b:
                    a9:21:45:5f:d8:6a:f4:5d:d1:78:a8:cf:df:38:62:
                    58:f2:29:33:69:f4:7c:54:09:59:c0:46:d6:56:65:
                    1b:c8:e3:99:c3:3a:d9:e8:4f:4e:bb:6d:5f:a5:cb:
                    a2:0a:6f:6d:d6:a1:99:aa:53:f0:60:ae:5f:f7:71:
                    4a:85:7d:77:63:f2:79:d5:be:57:1a:59:08:21:9c:
                    94:c2:71:b2:ac:b6:cc:51:fe:f9:5e:b2:5a:48:a0:
                    4f:bd:8e:51:34:d7:05:02:ae:b3:26:d4:59:73:01:
                    5e:e8:04:41:1b:42:86:af:77:54:a9:50:ed:f1:63:
                    f0:10:19:25:2b:2b:7f:eb:b4:3a:b2:82:20:5f:13:
                    b6:01:5a:46:7c:b4:df:6c:26:2a:b8:dd:11:87:60:
                    cd:c3:d8:37:ce:ad:dc:ab:09:30:d6:7b:30:5f:00:
                    dc:1d:86:c2:04:29:86:d1:9d:b2:f9:68:01:3e:6d:
                    41:4e:9c:f5:33:97:f8:6c:81:06:a0:e0:6b:8c:6d:
                    3f:aa:f7:f3:9c:32:d4:0d:fa:7a:46:7c:c6:c8:36:
                    a2:71:74:34:fd:7c:b1:40:a5:97:f6:ca:34:ba:70:
                    3a:a9:48:62:38:88:32:a3:da:aa:11:0e:23:92:b4:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:95:E6:6E:5E:DC:6A:DC:7D:F3:43:79:71:E0:66:82:61:C8:D8
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:6a:98:e9:17:c0:ca:20:04:09:54:4d:f1:21:9e:4e:8d:
         24:2b:ca:4b:4d:2d:44:c8:cd:f5:73:81:ad:3e:dd:63:33:14:
         d0:d6:64:94:1b:5e:d7:e1:da:67:f2:bf:23:06:2c:fd:66:32:
         3e:72:a4:8c:3a:ac:99:8d:b2:c8:9a:68:64:60:ad:a6:07:83:
         23:c2:e9:1a:cd:80:92:87:8c:53:fd:04:09:c6:6d:e6:b9:e1:
         d6:41:99:e7:f9:8f:cd:cd:17:06:38:5f:5e:eb:f5:38:8c:26:
         88:4c:42:75:88:49:4d:2b:aa:89:de:c1:89:7b:11:21:be:11:
         40:52:f1:53:0b:77:4a:74:2d:0d:72:fb:69:a8:f1:53:23:14:
         a4:9d:b0:4a:cb:8c:e3:1b:ad:97:0f:eb:57:00:f7:37:5f:3b:
         e5:cb:7e:83:77:35:5d:cf:64:9c:c5:11:14:97:5b:1b:4e:a8:
         e0:96:fd:94:d7:ea:0d:f0:35:88:30:a6:b5:54:05:48:ff:21:
         1c:6f:41:de:81:bd:72:c8:fe:54:a8:95:fc:2c:b7:53:dd:2d:
         b5:9e:37:9c:26:05:13:51:a4:48:7a:b1:19:6f:a2:82:98:f2:
         76:c9:e3:37:8e:1f:a8:1e:81:8c:5c:da:79:92:63:5d:1d:f3:
         25:4a:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----