Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File:                     5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier:          hTN0atk1iWBbybXJmFbEv0YTkdl0p4/nYCCSPebdA6o=
Subject key identifier:   4D:80:A8:32:C1:89:60:DC:42:60:D4:B8:D6:17:58:81:D8:E9:BF:AC
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       01962ECFBB0A93BAFCDD99872BD296C052B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 1VwLnjhc28i1tIdduiJVVipChEweL8yFYsrTYHszt9Q=)
                          2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
                          3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bb:0a:93:ba:fc:dd:99:87:2b:d2:96:c0:52:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=4d80a832c18960dc4260d4b8d6175881d8e9bfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:3b:f3:b3:02:24:86:b4:49:bd:af:e6:8a:
                    b9:91:7b:c7:2d:2d:d6:41:0c:42:17:3a:a0:9d:83:
                    2c:02:97:f3:0e:e4:85:8c:17:5a:9e:0d:b9:bb:e0:
                    f0:c4:cc:08:f8:0f:0b:70:2b:0c:ee:dc:71:f9:54:
                    a1:40:12:00:0d:99:85:e4:61:df:cf:cd:1b:63:68:
                    59:33:33:e7:7b:fa:8e:82:f0:f8:29:a2:04:89:49:
                    70:d6:b3:f8:95:e1:21:c6:41:75:9d:93:e5:63:58:
                    2f:9f:72:63:18:53:50:a7:11:4f:8b:ce:41:b2:0b:
                    41:be:b6:11:c3:b5:8d:fb:75:3a:64:b2:13:80:0f:
                    e7:1e:f2:fe:f9:cb:97:09:da:c7:37:a6:49:5f:62:
                    81:e5:a4:05:f6:76:f5:6d:36:04:1a:7e:86:c9:30:
                    09:c3:62:37:32:38:d2:82:18:a2:7a:2f:82:58:fa:
                    52:37:cc:e7:1a:8d:5b:ad:5d:08:2e:53:50:8e:26:
                    70:17:34:60:f5:23:05:8d:38:c6:13:83:15:b6:39:
                    c0:31:b1:0a:da:a4:12:05:f1:b9:bf:42:1b:d0:93:
                    88:7f:01:22:19:c0:fa:60:c7:4d:b9:46:64:87:be:
                    88:10:90:ea:4c:4c:8d:c0:e1:56:7f:9b:00:d1:5c:
                    17:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:80:A8:32:C1:89:60:DC:42:60:D4:B8:D6:17:58:81:D8:E9:BF:AC
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:5a:2c:87:0e:5c:00:0a:45:e7:3d:df:38:4b:30:9d:52:
         52:70:69:69:24:f3:42:3d:95:6a:a1:5c:57:f6:55:52:1a:65:
         84:b2:30:90:eb:b0:87:d1:4f:2b:57:74:6f:da:8a:2f:4a:d2:
         07:65:73:52:28:b2:67:b9:ba:bf:77:6a:11:d6:de:80:ab:0e:
         c2:11:6a:e5:8f:b6:43:a2:fb:cc:20:fa:c6:23:39:ab:b1:81:
         54:46:df:2f:a6:fe:2a:f3:e2:6b:41:44:c9:2d:ca:5f:56:e5:
         2a:0a:a6:a3:09:ea:54:88:6d:cf:c6:d9:cf:2b:ca:2c:a2:20:
         c0:f4:e1:d9:a0:d8:8a:ad:49:06:11:1b:95:49:48:5e:58:42:
         4c:84:aa:d4:f6:30:93:17:0b:58:7a:31:2b:12:d9:1b:bf:c1:
         9a:ca:32:36:36:67:52:4b:de:cc:f7:88:61:4f:a6:fb:97:87:
         ee:11:1c:55:7e:c4:3c:57:a0:c1:fb:c6:9b:d9:1b:cb:58:82:
         fe:d5:d2:bd:1d:19:a4:73:ea:07:88:01:16:fe:bb:c1:4d:ae:
         63:23:39:cf:75:28:cb:7a:ae:f5:30:eb:1c:e6:6f:7c:b2:8f:
         21:8d:2d:bf:2f:97:94:92:99:80:69:b2:86:ac:77:90:c0:61:
         7a:97:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----