Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File:                     5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier:          L8Hh20ecl0C6mTchSX0HeYlWu2GfYSIBbpzeWaXBqCo=
Subject key identifier:   29:C9:5F:9E:8B:18:CE:3E:51:62:6D:E1:9B:F6:5B:19:7A:E6:8E:E2
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer:       /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial:       01962ECF57FDE1DAB3E28D58F62782F3C1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number:          1046
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: TOij57M7uCWqPADrv0ZmvaE08T4HEtcS58Pp5SPvd1Y=)
                          2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:57:fd:e1:da:b3:e2:8d:58:f6:27:82:f3:c1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=29c95f9e8b18ce3e51626de19bf65b197ae68ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:85:dd:d9:0f:cf:8b:68:7e:3b:60:ef:3f:
                    be:47:45:43:8c:9d:c2:e8:5d:1d:f7:75:99:ff:87:
                    f4:42:c8:5c:5b:37:c9:d3:e5:91:4c:e7:9f:01:5a:
                    f8:5e:09:f3:4d:5f:ae:96:de:eb:75:4e:3d:49:56:
                    e5:6b:68:7d:e7:4d:ba:a7:7d:00:0b:5c:f9:20:c0:
                    3b:cc:d7:65:c7:b7:c2:7f:d6:af:25:90:e0:cd:d6:
                    71:d4:d1:9a:46:51:2e:41:2e:a4:62:51:43:aa:5f:
                    c2:37:62:dd:07:0a:9d:01:77:24:6b:69:a2:8c:2d:
                    25:33:77:b1:09:d6:a9:f5:46:36:96:7d:84:fe:5c:
                    3c:4e:b6:d5:97:36:a1:df:51:76:58:78:80:f5:7e:
                    75:be:5f:e1:e7:44:6f:b4:9c:ae:5b:d0:34:7a:2d:
                    89:73:dc:35:4b:96:28:63:17:5f:eb:f2:51:ee:26:
                    d9:b3:cd:ed:02:f0:b3:dc:61:5a:8c:3f:6d:7b:57:
                    ae:07:d8:ec:66:a7:a4:f3:dc:34:74:23:c7:c8:14:
                    b7:85:dd:6a:e0:fa:60:09:e1:28:91:21:64:a1:f9:
                    f7:a4:08:a3:cd:50:ce:a9:91:6f:6d:01:b0:dd:d9:
                    ca:7e:9d:d3:96:8b:cd:24:7d:5e:ae:f8:ef:a1:2b:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:5F:9E:8B:18:CE:3E:51:62:6D:E1:9B:F6:5B:19:7A:E6:8E:E2
            X509v3 Authority Key Identifier:
                keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:b1:a9:31:2a:16:b8:4e:f9:a3:93:fb:ae:fb:69:69:34:
         c6:0c:d2:1f:ba:4e:94:d9:85:30:71:0a:f7:cd:85:a9:86:b1:
         d0:d5:1d:30:cf:8a:65:6f:a2:7a:ec:a3:ed:a3:c4:42:9a:ba:
         9a:bc:38:f2:3c:c9:5f:3a:0a:37:34:fe:ea:8e:74:d4:32:22:
         cf:d2:28:6c:f6:e9:4a:9e:9c:39:24:1f:f8:56:17:a2:d5:2a:
         3e:ac:6f:f9:4e:29:de:d1:75:3c:fb:dc:b1:a1:71:d0:ad:bf:
         87:80:ef:e5:0a:87:7b:61:f3:4c:4a:b0:70:3d:bf:e6:f7:a2:
         30:a7:1d:b3:a6:39:b6:df:5d:72:e6:05:b7:99:a2:e3:cb:3a:
         19:54:1e:cb:aa:d1:ff:be:c0:c2:34:68:67:1d:c3:d6:fb:e0:
         b2:de:25:24:93:d1:d6:5b:b3:db:c8:db:ee:79:20:f8:b5:49:
         8f:14:fb:4d:0c:d2:90:79:74:46:53:8b:60:55:ef:ea:35:48:
         ac:9c:4b:4b:6c:96:0d:4b:a7:4f:46:e7:83:16:88:a3:5c:b5:
         0f:70:54:78:23:a2:7c:39:0e:6c:3d:b9:d4:b2:2f:ed:a9:86:
         be:8c:91:85:b9:cd:bf:ce:86:07:85:00:b9:8e:53:1d:db:bc:
         96:4c:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----