Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File:                     5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier:          x9WDzuPOBCWAAt2WyswPMi7DXLV4Q/2Q6AmlZUmjCQk=
Subject key identifier:   12:98:EE:97:31:A9:3C:11:31:13:90:1D:25:2E:04:03:5F:E2:7A:90
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer:       /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial:       01962FAB920C421ABF159F59552758776B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: AelGMh9+ppfOyED1S2SCzT+VxHSgT0YBmNyL0U5W+Ho=)
                          2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
                          3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:0c:42:1a:bf:15:9f:59:55:27:58:77:6b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=1298ee9731a93c113113901d252e04035fe27a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:9d:d8:50:16:77:22:f8:fe:22:c7:ff:d5:
                    ea:cd:e3:2f:ed:d9:1c:ae:80:02:ba:f5:54:37:6e:
                    95:91:9a:fe:aa:3b:0b:b4:28:3e:1c:a0:06:d3:2e:
                    71:9b:b7:3a:7e:86:70:0c:67:e7:f6:38:91:1d:ea:
                    17:36:07:01:90:95:a9:6d:ec:58:a4:2d:c4:50:fb:
                    b4:02:ae:ca:0d:da:51:92:36:41:80:e8:27:2b:18:
                    1b:e1:4c:bb:7a:fc:61:bb:4a:6e:c8:3d:a1:1b:43:
                    7a:72:ff:9f:e8:ab:bf:f1:99:32:ad:5b:4a:06:5d:
                    2d:87:db:f0:db:0d:be:cd:75:09:a9:5e:f3:44:e5:
                    56:c6:2c:0a:5c:e5:e8:9f:5c:ff:cd:af:15:82:e5:
                    e0:2e:a9:f6:5c:0f:25:4a:18:cc:52:a8:ea:81:e4:
                    59:32:60:f3:e0:64:31:e8:70:86:c8:2e:24:9f:90:
                    a9:82:fb:6f:ce:0c:c4:5c:8e:8c:71:7b:37:c2:9f:
                    5b:27:b5:ca:75:8d:bc:43:91:93:4b:94:01:6a:f4:
                    40:8e:78:d4:dd:a5:ca:13:64:15:9a:9d:1c:26:1d:
                    5c:76:bb:60:49:02:e0:13:24:ff:b5:53:a3:b6:77:
                    03:11:77:80:34:89:5f:bb:76:3c:58:c2:7d:b9:4d:
                    b8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:EE:97:31:A9:3C:11:31:13:90:1D:25:2E:04:03:5F:E2:7A:90
            X509v3 Authority Key Identifier:
                keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:03:13:43:be:95:6b:1c:70:27:29:9c:0f:26:86:b3:7a:f2:
         8c:91:8d:60:7f:06:50:53:ab:07:1e:5e:fd:c0:55:6b:73:04:
         4c:90:14:d8:a6:35:87:1e:b9:fe:9f:a3:e1:ad:42:12:de:01:
         c9:97:d4:1c:fe:6d:c3:58:fc:2f:98:31:b2:a8:7b:17:e3:85:
         91:ff:a5:d4:aa:6d:ae:eb:7a:41:cb:29:b8:d4:82:be:66:3f:
         5d:e2:e8:cc:30:e6:fc:7f:86:ae:2c:1b:7a:cf:0e:fc:ff:b3:
         9c:13:45:df:a3:2d:b0:83:ec:8d:1c:a4:97:bb:d1:ab:68:3f:
         9a:18:c6:c0:d7:14:13:1b:bc:7c:9c:cb:69:33:c9:95:ab:42:
         8c:34:fa:7b:8e:ce:ef:99:5b:0e:e2:ae:32:a9:46:1e:ce:34:
         ec:a6:62:9d:97:7d:e1:41:93:1b:7c:98:de:9b:70:25:19:85:
         31:f2:db:3a:3c:de:8d:fa:5a:2a:41:f5:7a:15:84:ab:aa:57:
         61:52:8e:17:67:8c:ae:48:73:5c:cf:27:13:6f:04:6a:8e:fd:
         88:9d:56:01:37:43:cc:27:a8:48:d8:ae:66:65:42:92:1e:60:
         95:e6:bf:f0:2c:91:d7:18:3b:34:5b:59:bd:0e:c9:25:70:a8:
         4c:54:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----