Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File:                     5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier:          nBjnGh7MoP3SIwrB7cO46I4X+6seHxBL4y6mVa78VIY=
Subject key identifier:   18:C5:2A:59:8D:52:87:FA:F2:AE:23:DB:B5:65:08:81:FC:3C:86:BC
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer:       /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial:       01962ECFBFE64DEADEB6CEC1F229678CE394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number:          1316
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: NBBk4pOxmsp3GsjItS33j8jcVgdsZE+OQNo5h/tP+i4=)
                          2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bf:e6:4d:ea:de:b6:ce:c1:f2:29:67:8c:e3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=18c52a598d5287faf2ae23dbb5650881fc3c86bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:ec:5d:6f:15:b5:0b:be:c4:67:f6:67:01:
                    be:e2:54:b6:a8:be:39:50:7a:ae:f1:7b:6e:1b:9e:
                    f7:ce:fa:3f:80:02:fb:9d:84:a2:e3:4f:58:15:99:
                    68:bc:5d:29:cd:79:48:8b:4f:aa:56:f2:6f:84:3a:
                    d7:cc:6d:d3:54:47:f7:58:3e:06:80:0b:5f:20:57:
                    8d:98:34:71:2d:7a:d4:ad:34:ae:14:b0:40:bb:a8:
                    5f:77:ac:61:c2:ac:a1:70:82:cd:a9:72:95:57:72:
                    e9:25:9d:39:d5:23:06:20:75:7d:32:67:c8:96:95:
                    39:2b:ed:59:50:c4:fc:d8:ae:86:f1:0d:b3:a0:51:
                    d7:f0:64:e2:b4:c9:c0:68:58:c1:06:07:f4:10:a3:
                    80:3a:10:a4:fd:36:d6:9a:3b:4a:7d:ae:2b:eb:0e:
                    17:82:48:46:80:09:64:a2:29:b8:ea:6f:fa:f4:5f:
                    98:98:4a:ef:fa:e7:2d:e1:c1:17:61:d6:c8:c6:d0:
                    f6:28:01:a3:a2:07:5d:e6:26:b4:5b:8e:1b:33:4f:
                    8a:72:e4:54:b3:76:63:a3:27:0b:8e:3d:a8:67:44:
                    65:2d:22:b7:3f:d8:36:4d:c9:e4:c9:3e:2b:e7:98:
                    dc:b1:3d:f2:f7:ca:c3:01:e5:9f:99:ec:96:15:7c:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C5:2A:59:8D:52:87:FA:F2:AE:23:DB:B5:65:08:81:FC:3C:86:BC
            X509v3 Authority Key Identifier:
                keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ee:53:1b:43:ee:d4:73:a7:69:4a:49:53:13:f2:51:15:92:
         87:7b:25:77:1a:89:7e:8a:78:f8:b0:91:ec:71:5c:7c:9f:2e:
         2d:32:62:6f:de:b4:46:43:7c:94:57:28:f6:74:5d:eb:8d:ad:
         ef:47:b9:57:ca:45:6d:3d:18:61:12:ab:20:72:bf:7b:30:bf:
         cb:60:25:85:51:ae:35:31:8f:cc:e1:58:c7:90:ff:a7:f5:d8:
         33:28:74:24:18:94:c2:f0:2b:8e:8f:e5:43:ef:73:00:23:4e:
         7b:c3:5d:be:49:51:cb:f1:64:57:e5:1e:b2:27:39:9e:bb:c8:
         c7:ba:40:bf:85:48:aa:1d:bc:8e:33:85:af:cd:70:05:84:9b:
         46:34:56:fd:62:2b:33:fe:c5:35:30:4d:56:d6:bb:6d:0b:fd:
         e4:9c:2e:e3:cd:ca:cb:7e:aa:da:42:91:39:39:59:5a:04:49:
         f0:da:ee:cd:44:64:5c:d5:67:7f:8c:b1:d0:1f:ad:1b:7c:08:
         b0:2d:dd:f4:07:a5:d3:d1:03:47:23:99:56:d4:2f:63:3f:ef:
         dc:0b:c5:2b:3c:2c:74:5f:a3:9c:f6:87:87:ad:ca:2a:4c:c2:
         20:30:c3:2e:aa:a7:c0:28:ee:b6:f8:f0:b1:1e:ee:ee:b1:49:
         aa:9d:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----