Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
File:                     5GauE1UGtZjWakES40V2mfHEFOE.mft (raw, json)
Hash identifier:          iCphiZt7uKA4VsqrBhQOzRSYI8gRO3A0ySf+Gmi+E4I=
Subject key identifier:   A9:1A:B8:A4:05:B9:4D:F2:AD:9D:B0:64:6E:6A:60:41:84:16:70:33
Authority key identifier: E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1
Certificate issuer:       /CN=e466ae135506b598d66a4112e3457699f1c414e1
Certificate serial:       01962DF419797F007007566843CEC0080961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft
Manifest number:          0603
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: 5GauE1UGtZjWakES40V2mfHEFOE.crl (hash: gaIkwbNFW9fta54dSdaAf/vHo0D1n0jvuDsO5tCEfnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:79:7f:00:70:07:56:68:43:ce:c0:08:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466ae135506b598d66a4112e3457699f1c414e1
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=a91ab8a405b94df2ad9db0646e6a604184167033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:80:d6:96:fb:f0:19:2a:fe:c0:b9:82:c4:
                    d0:dc:cb:15:2b:5d:8d:bb:81:1d:83:3d:27:8d:ca:
                    b7:c3:ad:37:32:5b:5c:1c:a2:32:1a:4a:03:8e:f6:
                    94:0e:89:da:32:87:b3:35:7d:0e:0c:da:cd:28:44:
                    b0:67:32:b7:fa:3a:0c:90:8a:b4:d5:0d:6c:74:67:
                    29:af:ae:e9:68:92:4a:ed:76:e5:3a:60:b2:1a:fe:
                    00:7d:35:b2:5b:b3:1c:1a:0a:09:50:79:f3:d2:59:
                    1e:41:cc:d1:30:90:6a:ae:e1:1d:f2:b1:5f:b9:31:
                    03:5d:95:37:2b:7a:e1:9f:6f:1c:a3:47:87:86:f6:
                    98:11:f7:22:6c:86:7f:c4:11:35:4d:b9:32:c0:08:
                    5f:00:16:21:e4:36:42:43:52:bd:df:27:2b:1a:db:
                    55:c4:59:51:16:64:e1:d9:c6:11:c2:8d:ea:ae:1a:
                    aa:e5:22:eb:05:a4:ae:ed:64:1b:5f:92:d7:7d:42:
                    f8:08:fd:cc:54:e0:4e:7b:f1:dd:1f:57:fd:fa:c6:
                    61:ca:e8:c2:79:2e:00:f3:79:1b:a3:df:12:94:3b:
                    71:a2:4e:60:49:ff:fe:c1:30:90:9e:de:81:6b:36:
                    38:9d:50:c2:4c:31:5d:54:20:c1:ff:33:92:8b:d2:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:B8:A4:05:B9:4D:F2:AD:9D:B0:64:6E:6A:60:41:84:16:70:33
            X509v3 Authority Key Identifier:
                keyid:E4:66:AE:13:55:06:B5:98:D6:6A:41:12:E3:45:76:99:F1:C4:14:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GauE1UGtZjWakES40V2mfHEFOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/831c4d-8161-4dc1-9623-ced52db81936/1/5GauE1UGtZjWakES40V2mfHEFOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:14:96:90:23:5c:40:8c:a7:5e:fb:4e:24:2e:fd:56:e9:b9:
         80:97:76:23:30:bb:cb:b4:2b:e4:b7:39:ca:dc:29:b9:f6:48:
         0e:69:c9:03:2f:24:da:53:b2:9a:9b:94:99:44:c0:60:1b:6f:
         e1:44:d8:1f:07:c7:64:89:d0:79:3b:cd:8f:9a:a3:7c:56:75:
         89:82:26:18:ca:c7:80:a5:62:e7:1a:65:71:7f:14:c0:c0:f8:
         66:4e:e9:aa:e1:9f:75:5f:ce:42:20:21:18:39:05:c3:0b:4c:
         ee:39:e9:84:8b:e5:09:55:79:0e:4c:91:e6:a6:94:7b:f5:67:
         60:c6:15:c7:bb:ac:52:ab:8e:de:ef:cd:59:0d:d1:2a:7a:f0:
         57:58:07:76:f9:b6:b6:b3:a2:ea:06:cb:b4:5d:89:4d:b9:d2:
         4f:33:7e:d0:ec:b3:f5:01:57:d5:36:f1:81:03:1a:dd:fa:55:
         55:db:fa:48:d5:9d:7c:50:b0:14:13:1f:b4:b0:75:29:5d:c0:
         cf:0e:a8:47:34:e6:a1:5c:e6:a8:c9:a7:ae:8e:de:bc:a7:3b:
         2f:28:f7:ba:7d:48:d8:84:08:d8:4d:4d:26:2e:d5:30:f6:d9:
         be:9f:de:f0:19:d3:0c:d7:cc:2a:f7:7d:fb:d1:10:7d:06:55:
         5f:40:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----