Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File:                     R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier:          YsmTa7o/3pdzb/aeUDpFDt5yglCL2CTdNHlk76pT4Dk=
Subject key identifier:   05:01:59:8D:5A:6D:B7:9E:6F:6E:FE:1E:25:96:A3:F0:17:39:2D:AC
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer:       /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial:       01962ECF5491E858513D7CAFD79808CECC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number:          1222
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
                          2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: GAcNpiyz+pu4/5taj5HZs5NK3z+2Adzy9MayATRlJXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:54:91:e8:58:51:3d:7c:af:d7:98:08:ce:cc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=0501598d5a6db79e6f6efe1e2596a3f017392dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:79:c8:8d:f5:d3:a2:63:30:eb:0e:6f:21:
                    7d:19:55:09:f8:dc:5a:66:e3:6b:e3:76:2c:71:4d:
                    e1:0c:0a:f1:8e:8c:21:93:45:d0:a9:26:72:6c:31:
                    78:73:23:a0:1e:39:6b:cb:8a:f1:0c:c6:50:97:6b:
                    4d:97:b3:a5:72:8a:bb:d8:be:f5:0a:9e:4f:32:0e:
                    0c:80:f2:52:bb:14:82:5f:1c:d7:7a:19:50:4a:74:
                    cf:0e:90:32:ae:7d:34:2b:c7:fd:10:a3:ba:30:6e:
                    8b:06:31:5c:64:a4:63:aa:5d:57:9f:ca:86:f6:a1:
                    04:d6:bb:28:72:8a:d2:40:ee:a3:23:1b:3a:16:15:
                    18:10:49:f6:50:e0:8f:5c:46:b1:dd:1d:99:89:ce:
                    1b:34:26:92:e2:8d:dd:64:56:f4:5e:6c:f8:00:89:
                    cb:ed:b9:42:46:1d:27:9b:2b:31:49:da:26:30:75:
                    29:b8:0e:ce:ed:14:38:c3:cf:c2:d4:f7:7b:24:ec:
                    8e:28:6d:a8:bb:1b:b8:90:5d:6b:16:32:5c:b7:6d:
                    02:1b:12:7f:9c:e4:7a:1f:59:04:2d:79:b7:91:24:
                    e0:56:c6:08:ae:f2:b9:8c:9d:82:79:02:47:8b:fd:
                    3a:7a:1b:5d:0a:8a:88:71:56:6a:f3:0b:cc:5a:09:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:59:8D:5A:6D:B7:9E:6F:6E:FE:1E:25:96:A3:F0:17:39:2D:AC
            X509v3 Authority Key Identifier:
                keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:d6:39:80:29:f5:a8:56:f2:63:d8:6a:bc:07:6c:77:22:
         3a:0b:d7:b9:67:92:b1:93:44:19:20:1a:95:25:91:14:61:4e:
         d9:cf:3d:04:6a:ec:e7:b5:30:12:6f:e5:76:88:ff:f6:da:55:
         62:eb:7f:22:f7:be:98:41:23:da:39:1e:8b:e4:3f:25:ba:fc:
         21:ce:0c:7b:ae:14:28:b8:22:a5:52:91:90:24:77:15:e2:c3:
         62:86:0c:55:df:da:ad:fa:09:e0:66:52:52:c5:45:79:2c:24:
         23:06:48:32:0e:8d:49:77:ec:6a:df:78:82:b3:ee:78:6f:b8:
         a2:c4:13:26:25:f6:b8:6c:60:31:01:c3:17:c9:70:fc:68:b6:
         36:93:c1:b5:51:9a:67:80:1c:42:2a:3e:f1:fd:44:21:a8:da:
         4c:6f:18:4c:93:dd:59:a3:16:41:7c:75:b2:35:a0:d6:8a:23:
         4a:e9:54:12:26:7b:f5:da:1a:a3:65:a6:d7:f2:16:f6:41:6f:
         cb:dd:72:31:79:6e:ad:66:cc:3a:f3:8b:5e:6c:c4:59:1a:3f:
         09:47:35:61:0b:91:82:d2:5e:a0:d9:c1:f2:b0:23:3a:f8:85:
         fa:eb:6b:39:5a:d8:49:e2:b9:6a:9c:04:3c:ba:0d:e8:89:06:
         18:60:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----