Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          93b9ROgjQDnBuXxOKfrpMI3iE7ONyz2HVHOvTktv+tI=
Subject key identifier:   85:8C:6C:12:C1:6E:36:4F:6E:FB:CC:97:37:FC:18:0D:B0:A8:66:64
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       01962F747B639964980218B160A6B1EFD3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: 2cbIpnpSK2+4GMgXD92iXPll8V9FD1Dq0Wekuxr8m0g=)
                          2: uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa (hash: g7l6o1+EK67dHVtVxC57iUhjiYlLOzwY9EalaarNVkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7b:63:99:64:98:02:18:b1:60:a6:b1:ef:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=858c6c12c16e364f6efbcc9737fc180db0a86664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:a5:9d:cc:cb:51:9d:58:69:59:8e:e1:d3:
                    55:63:2d:31:9d:96:5b:87:19:d5:37:57:ed:22:a8:
                    1f:4c:23:60:a0:09:db:02:d6:34:e9:4c:1f:02:e0:
                    07:3d:ac:4b:4e:ed:c7:d4:06:a3:bf:d0:db:28:c8:
                    28:16:8c:3b:30:84:41:d2:95:6e:03:e4:64:3f:e2:
                    98:a8:a7:74:e4:d3:88:cc:b4:eb:ba:32:98:d4:27:
                    e8:35:21:7d:c4:61:c1:24:7e:9d:e4:7a:47:cf:d5:
                    b9:e2:76:46:11:af:f2:36:d2:c3:4d:1c:91:8d:eb:
                    fc:17:98:1f:93:ac:6f:24:0c:66:ab:ca:16:9d:b4:
                    df:d8:8a:48:63:43:80:7f:59:59:7a:f0:fa:be:8d:
                    81:09:f0:3e:f6:bd:e8:b4:37:f7:c2:c0:64:1e:14:
                    aa:dc:c5:db:01:d4:75:dc:ad:da:b9:94:d0:c1:bb:
                    4f:97:89:07:61:20:1f:66:cb:14:df:77:67:37:59:
                    75:4f:02:fc:eb:f6:d8:e8:30:87:22:cb:a6:61:5b:
                    84:a4:ad:7a:67:93:3f:03:7f:c6:f7:88:6d:83:0b:
                    42:46:5f:7d:1b:1e:a6:d6:61:1e:07:d3:1f:ba:15:
                    2f:6d:23:b8:bf:6f:5f:dd:1b:49:3f:9a:80:4a:2b:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:6C:12:C1:6E:36:4F:6E:FB:CC:97:37:FC:18:0D:B0:A8:66:64
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:8a:5f:14:a3:4b:0d:b9:f6:d9:8b:25:af:4b:96:7d:32:
         8d:d2:b0:3d:8f:f8:6c:7c:ec:1e:10:20:8b:02:6b:9b:61:a9:
         9f:cf:82:84:93:e3:39:1f:7f:7a:36:4c:2f:d5:f3:7d:f0:cc:
         cc:f3:f0:a9:1a:3d:95:d4:04:7a:17:4d:1d:4f:d2:27:ad:e7:
         92:e5:6d:41:c9:28:f6:1a:3e:a1:1c:3c:bf:ff:17:8b:27:34:
         0b:2d:61:cf:1d:ed:f4:bd:23:a9:78:a3:43:96:e0:65:97:cc:
         76:2c:0b:05:bf:db:5d:11:d5:cf:4c:60:2e:7a:04:5c:bf:32:
         28:6e:91:92:46:34:13:40:58:f7:87:10:e1:e3:1f:c1:f9:bc:
         e6:1c:5e:71:61:1d:ea:4d:7d:a4:01:2b:59:67:d2:4d:46:ff:
         04:50:bc:54:b9:27:01:2d:ef:fb:7c:3e:42:22:6c:36:39:82:
         64:66:b1:f1:ad:cc:1f:2c:08:46:e0:34:a4:e1:cb:0c:6b:37:
         85:3f:d3:d2:40:b9:3e:e0:10:e9:ec:7c:7b:95:f3:2a:1f:3f:
         35:1c:c8:d1:e1:00:0b:21:22:c1:6b:a9:37:75:73:e8:dc:f6:
         10:53:c0:95:4f:e3:0f:77:7b:fe:52:65:c8:13:4a:1c:c1:6f:
         f4:76:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----