Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          956soH5jKIsb0zE3HLmOIL5dKPTPiUmPFqTpOMe2KZ8=
Subject key identifier:   E4:7A:9F:AF:3F:25:FC:28:85:18:56:EF:3A:D7:51:28:DE:5D:92:4A
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       01962E617BAF15757E5993DBA3862EF9CF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (hash: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=)
                          2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: 5G8PHss/ZMTZvEsbUqzzdxihLhu3JeD0R3P+cIoKz2g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7b:af:15:75:7e:59:93:db:a3:86:2e:f9:cf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=e47a9faf3f25fc28851856ef3ad75128de5d924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:73:96:d0:57:1c:10:6c:8f:72:e4:39:27:
                    bb:d3:6b:f8:07:12:de:e7:ff:1c:a0:91:2d:7c:d8:
                    bd:b7:b2:ec:d5:95:f1:b3:e8:0c:23:c0:9a:4e:73:
                    9c:a3:ca:c0:db:45:aa:83:f2:66:67:b9:05:c4:c0:
                    e1:80:29:be:d0:8b:14:79:cd:2c:e1:a3:92:11:6d:
                    31:21:fd:a0:40:71:7b:c0:6f:8f:98:82:2c:2b:90:
                    b4:0c:0a:10:b5:43:19:87:20:80:d0:da:16:5d:6e:
                    1f:4b:a7:6a:3d:5d:a1:8b:ad:9c:57:54:a7:15:71:
                    cd:c6:9a:fd:07:80:a0:26:c4:03:89:bb:a5:e0:70:
                    fe:88:b5:11:e1:7e:54:96:37:76:ef:fc:ee:d0:d5:
                    b8:d5:29:69:fb:a0:96:a9:fa:9b:5e:47:37:db:9f:
                    59:63:87:d2:7c:de:dc:20:cf:13:3d:42:89:41:32:
                    22:0d:37:69:4a:c8:bc:16:6c:4b:32:7e:dd:fa:f6:
                    87:f9:77:35:d4:7b:d0:ff:40:48:94:c5:04:bd:6d:
                    cd:a2:9f:a2:b1:eb:17:97:cc:18:d3:f8:44:d2:a2:
                    47:1c:23:06:44:31:bb:7a:52:72:99:d0:ec:9e:ab:
                    fc:89:43:a3:18:0c:e4:c4:fa:5f:42:18:50:86:43:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:9F:AF:3F:25:FC:28:85:18:56:EF:3A:D7:51:28:DE:5D:92:4A
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d4:24:4c:f3:76:92:14:5f:82:16:aa:74:ba:8b:3e:64:c9:
         aa:4f:6c:68:ee:b5:09:2b:8b:d4:fe:f5:d8:78:87:8a:8d:6f:
         31:e5:d0:88:48:00:4b:84:aa:97:db:9b:3d:ee:b4:ec:4d:53:
         08:f3:14:ff:62:ff:2e:cb:69:34:2d:eb:d3:89:27:56:af:5a:
         49:b2:50:38:42:9c:42:35:e3:05:a4:25:1e:6f:1e:64:ad:9a:
         3c:8f:76:03:e1:50:01:69:e4:e3:30:aa:b3:c8:33:80:01:42:
         6c:51:b3:1d:34:82:9c:fd:ec:b5:4d:e5:f9:7c:97:4d:9e:a9:
         ef:12:31:c1:6a:c8:45:96:56:4f:a0:b1:b9:f3:0a:ba:a1:22:
         84:95:b8:15:d1:e3:dc:9f:ff:3d:d0:b1:ca:ed:02:26:63:2a:
         b1:0f:14:bc:96:83:34:e3:8f:25:e7:55:ec:8f:f9:f6:24:e8:
         4c:f9:7a:e8:8b:a1:62:63:00:7b:4a:06:98:f7:39:1a:92:67:
         96:22:af:a5:1e:6c:a2:cf:42:ed:1f:f1:d7:50:38:22:78:98:
         ee:15:cf:ec:dc:48:75:f9:44:a0:c5:9d:c2:eb:0f:73:72:0e:
         d1:af:32:59:cf:af:fa:de:78:e9:61:1e:4c:f8:f0:66:d3:ef:
         75:66:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----