Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          wENjbhgJj2tc7Ho3ZvXax3fiY8dG58Frdo8DFXShq8s=
Subject key identifier:   94:EC:E3:4F:6B:F0:F9:B2:3D:A2:E3:B3:CA:0C:74:4D:D5:57:A6:74
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       01962E98DF6D18888EE13629271E1061CABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          080C
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=)
                          2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: HwXqLgoGfPOwIBH+l9LTy2tcNJg0sHBibNNcNBnBh04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:6d:18:88:8e:e1:36:29:27:1e:10:61:ca:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=94ece34f6bf0f9b23da2e3b3ca0c744dd557a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:93:5b:ca:f6:9d:56:cc:26:7f:ad:1e:ed:
                    e0:66:93:a3:13:9b:42:14:a4:9f:d6:d9:36:ce:d0:
                    f0:1e:c3:17:c3:d6:b7:6a:2f:70:11:c3:90:ba:79:
                    42:2c:99:61:ff:7d:28:d6:a5:60:76:91:3a:af:84:
                    d5:c6:ca:cf:00:92:1b:40:af:9f:47:dd:1d:54:2f:
                    57:e9:5d:93:c2:2b:f1:cf:8e:c5:32:09:ad:be:24:
                    d0:7d:aa:b2:c4:de:d5:d8:f1:90:95:12:96:b6:30:
                    a2:a9:af:e2:b0:40:b8:f5:2a:0f:16:9d:2d:fb:c4:
                    3a:fe:29:ae:87:d7:15:b8:ca:94:5e:05:ae:88:06:
                    7d:71:c7:a8:7c:2e:a5:ef:07:c4:f5:95:bb:ed:c8:
                    13:7b:57:64:0e:55:a3:1f:c5:f3:b4:c3:0d:22:26:
                    2e:0c:55:e7:43:b0:84:64:d3:b6:61:ca:64:1d:4c:
                    94:0f:72:d0:4d:66:dc:59:b8:cd:b4:bb:09:9b:96:
                    13:9c:5d:6e:59:cf:52:c8:df:22:88:6c:12:16:4e:
                    c3:1a:14:ae:c5:90:5f:85:de:cf:25:4e:63:f8:7a:
                    60:0f:6a:26:4c:5f:03:85:77:44:6f:b3:d1:f3:98:
                    e6:3d:4a:31:85:e7:53:f9:b5:a7:ad:d8:d2:1e:2f:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:E3:4F:6B:F0:F9:B2:3D:A2:E3:B3:CA:0C:74:4D:D5:57:A6:74
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:62:51:e8:e2:4e:87:7e:7a:f5:66:f6:cd:21:ae:4a:4d:
         4d:d3:f0:e4:be:25:fb:7e:1f:da:4a:8c:38:bb:d7:ad:89:a7:
         b1:ab:50:ff:44:16:71:3a:b8:28:fc:0e:fe:54:70:48:a5:70:
         47:15:17:29:94:ac:87:c4:43:1c:41:39:87:05:52:15:c7:fc:
         81:b8:88:a8:b7:3d:5c:db:e3:9d:d9:91:5b:84:0e:4d:01:bd:
         9f:03:44:70:43:20:0e:43:73:00:e3:07:5a:df:4c:62:56:2d:
         63:66:06:98:94:1d:0d:b5:81:9e:4d:0b:8a:f9:ca:71:5f:fc:
         56:c9:dd:b2:b6:66:66:56:52:ce:ac:8f:a0:72:3b:4b:b1:0f:
         f1:dd:73:a3:f6:b0:e5:83:5b:64:1f:aa:ee:01:86:be:ed:af:
         58:13:b6:43:b2:ab:19:16:fe:25:5d:9d:fb:26:59:d4:c9:ad:
         71:0b:d2:45:c6:05:ed:72:d5:4a:8a:76:e8:13:6a:bb:b4:a9:
         77:d2:ac:47:3b:5b:ff:97:09:3c:09:18:d8:ca:86:c9:66:e5:
         5d:23:f3:d9:3b:98:fe:f9:15:28:e8:4d:16:7a:6a:bd:73:9f:
         ae:c1:a3:e4:d5:f0:f5:3b:ba:95:85:6a:4c:cc:57:5c:27:de:
         ad:21:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----