Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File:                     rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier:          SVLavAWmGZzCqge+ja6EQS2vs1Aey/WUByohq6pMT7w=
Subject key identifier:   F9:86:09:DE:B9:E5:7A:1F:E7:97:44:0D:F6:D2:01:44:6A:45:D9:33
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer:       /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial:       01962F74A620CE01953DF93E100BCE47041B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number:          0882
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: aPoJ+yBRWsWJNuE0tU9qAE19rUn0bBvyPjedYTQn240=)
                          2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a6:20:ce:01:95:3d:f9:3e:10:0b:ce:47:04:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=f98609deb9e57a1fe797440df6d201446a45d933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:f3:ed:3d:49:27:e3:64:5a:4c:ba:24:55:
                    d8:4e:97:ee:83:d8:5d:8a:23:68:ba:4b:15:82:07:
                    93:cc:d3:31:14:4a:12:59:f9:3e:45:9e:62:24:d4:
                    50:5e:7f:8b:9d:e1:d3:23:63:f6:16:51:2b:dc:c3:
                    93:93:f4:7f:2c:6e:89:6b:f8:70:c8:dd:9c:83:3e:
                    f5:c3:92:54:ab:06:53:a2:7a:05:b8:99:24:0c:87:
                    a4:3f:4b:49:6d:72:c6:20:31:4e:15:70:1d:ed:54:
                    c9:e7:50:4a:3a:d3:53:29:ea:54:7a:f1:78:23:49:
                    22:dc:ac:7a:8c:9a:cf:44:7b:75:60:dc:5a:29:43:
                    75:c9:75:19:27:21:14:6b:61:24:65:7a:78:ea:7b:
                    ed:92:33:f7:ca:d3:1b:d9:d9:0b:a9:c0:ad:e8:04:
                    12:2d:52:20:53:4f:ec:e7:63:d7:3d:d0:59:59:8d:
                    93:03:15:01:b5:6c:e9:b6:2b:ba:12:02:46:9d:40:
                    4b:ca:26:72:5c:42:17:aa:62:be:b0:05:a2:d0:2c:
                    ef:8e:fc:23:c0:77:09:5c:2c:71:ce:a1:2a:40:e5:
                    09:c1:1b:9f:c5:d6:97:94:38:ec:06:b4:d7:ba:ab:
                    75:58:74:f5:46:a0:c4:df:bb:9e:d3:52:b8:04:3a:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:09:DE:B9:E5:7A:1F:E7:97:44:0D:F6:D2:01:44:6A:45:D9:33
            X509v3 Authority Key Identifier:
                keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:25:15:26:58:88:24:c1:da:32:11:39:96:d8:e8:53:1a:
         c0:ba:18:a7:0e:64:06:ca:bc:62:2e:61:74:ae:ce:f4:55:b1:
         3d:3d:73:e8:31:21:17:11:1a:bc:a5:b8:1f:2d:52:b8:b4:de:
         2c:30:39:53:e6:19:72:25:df:01:8f:aa:cf:98:37:2c:d2:81:
         3d:e4:ad:e8:10:5c:51:47:f5:e0:3c:46:43:06:64:dd:0d:d2:
         e7:0b:10:4e:87:29:2e:cc:8f:1b:bf:60:6a:12:3d:c4:a2:6a:
         83:0b:25:07:c1:c9:22:d8:9e:74:2b:30:33:b6:e8:26:65:be:
         b9:85:f0:d2:69:1c:08:f4:7c:a6:63:91:24:d3:0b:9f:7c:9c:
         18:32:00:c4:c0:c7:7b:93:11:ba:69:23:91:23:9b:71:83:bf:
         82:10:67:a6:09:23:de:49:04:c5:c4:0e:e5:44:d1:34:9c:51:
         2d:3b:cf:e1:2b:ec:59:42:d6:a1:5d:ec:93:d9:a9:7a:64:74:
         92:68:1a:da:d9:96:96:be:fe:63:6a:e6:b2:bb:c9:f6:49:aa:
         08:59:f1:c9:8a:d8:21:3f:2a:3b:36:4d:54:79:1f:93:82:d9:
         e4:4d:5f:44:ca:23:6f:7b:d0:a6:83:b7:a0:af:eb:be:32:18:
         fe:56:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----