Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File:                     5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier:          1LjFMxez+y2iH+xfqLx1nqSa7v51DZjyK9gHT6/QQdw=
Subject key identifier:   1F:B8:34:25:1E:B1:FC:A2:36:E8:E1:21:6A:27:C4:58:B3:0E:D1:DA
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer:       /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial:       01962F74BBA14A182172F49C57509381EEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: D+ACrRCPwdSaEWKvEEy8TnQ/eeT73Px8+fMetoj5PII=)
                          2: ZchGG8A8nhqHRHzSz8wIeuBKy7A.roa (hash: fyy0T0JEDqACIzgC4O1cOibFQ+4m6gfIvZEPpikdJzY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bb:a1:4a:18:21:72:f4:9c:57:50:93:81:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=1fb834251eb1fca236e8e1216a27c458b30ed1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:ca:2a:5c:99:22:78:7b:83:54:ed:a0:50:
                    90:8a:22:16:bd:be:80:af:b6:d8:a1:46:a5:00:56:
                    ce:41:cf:8c:b7:84:23:02:4d:de:8d:e5:47:2d:1c:
                    d4:79:4b:0e:40:f5:1a:c2:1c:15:cc:f1:69:88:e1:
                    79:4f:ff:9a:10:49:0d:38:e3:26:5c:f2:1d:64:08:
                    66:9d:f0:e9:3d:15:2e:c8:cf:80:f3:4f:e9:d0:9f:
                    66:30:d5:fb:d4:49:c2:15:a1:9b:58:3f:a3:c4:25:
                    40:2d:0f:e0:2a:75:de:09:b0:09:fc:6c:e7:f9:07:
                    fb:b7:b9:66:0b:d6:a4:8d:91:c8:b8:77:81:be:6e:
                    1b:c5:39:63:d5:d9:cd:98:3e:53:36:ee:28:b3:eb:
                    cc:4e:98:10:95:e6:4e:a5:e9:40:12:fe:ca:7b:d5:
                    c8:e9:4f:18:c4:43:d9:da:e4:be:ce:53:79:d8:bc:
                    94:c3:69:cd:7e:39:40:20:6d:65:9c:4a:44:93:3f:
                    58:35:1d:e8:5e:36:9e:95:b9:57:b8:78:d3:a3:13:
                    82:e1:39:20:9c:8a:a1:1c:d7:9b:b1:70:0e:57:6e:
                    81:74:2f:ba:cb:7e:13:59:18:dc:99:f1:fa:bf:58:
                    a9:72:b9:f4:48:74:4a:81:ff:b6:6a:64:c6:a8:6b:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B8:34:25:1E:B1:FC:A2:36:E8:E1:21:6A:27:C4:58:B3:0E:D1:DA
            X509v3 Authority Key Identifier:
                keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:44:c3:aa:c3:8e:30:e7:26:d4:f4:1a:29:9e:40:1d:7a:
         69:98:b8:04:d9:d2:fc:0e:aa:bb:62:d0:25:a9:e6:54:ec:30:
         3b:a8:d7:0b:97:6e:db:1b:0f:ac:9e:dd:2b:8b:6b:c2:a7:00:
         36:0f:1d:de:84:2f:3a:c8:ae:1b:6c:1f:09:7b:e1:de:4e:10:
         d8:d3:e0:f3:f7:76:43:01:80:fd:59:ed:bb:54:33:0d:97:81:
         57:9d:ae:e4:2b:3f:3d:26:da:7d:97:94:09:7c:62:44:c1:0d:
         3e:1e:6f:c8:01:8a:ff:12:67:64:89:7e:be:a7:b1:a1:11:fb:
         fc:65:bf:e8:13:07:56:99:87:8a:d6:71:12:d6:8e:1a:f0:82:
         8e:a1:a6:a8:8e:e8:d4:53:8d:a0:fa:3b:c3:9f:f3:e0:2a:ec:
         b6:27:ed:0b:fc:11:7a:5a:d8:24:4a:d5:56:79:3a:75:69:c7:
         c2:70:15:a4:0a:59:a3:68:f1:94:37:98:a0:95:bd:05:40:a6:
         e0:50:fe:c6:a9:58:a3:66:c8:98:c7:70:2f:4f:29:13:d5:42:
         61:6e:3b:93:04:01:21:e9:d5:db:40:d7:87:66:ac:a2:6f:04:
         dc:76:94:4f:1b:d9:25:11:17:c7:cd:d2:a8:ea:37:f9:8f:5f:
         90:e4:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----