Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File:                     s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier:          90oonACNHiBAZhzgDsI0m48CZEiFOt02ALAuXOaxGLQ=
Subject key identifier:   7E:63:02:02:CF:F1:D5:7C:EF:D9:D2:7A:CA:65:5B:8B:7D:CA:A8:61
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer:       /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial:       01962E9893D0094F8BE3613D07579C552AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number:          048C
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
                          2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: rgLz6Ycf+x/FylwlQktCS8fzREjNiBBq4zH4B9PCl+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:d0:09:4f:8b:e3:61:3d:07:57:9c:55:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=7e630202cff1d57cefd9d27aca655b8b7dcaa861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:8a:79:e7:ba:7d:dc:f3:03:0a:1a:cc:20:
                    ff:56:c3:9e:ec:94:1d:5d:26:c8:4b:8f:c2:f3:0d:
                    71:94:59:17:cc:d1:87:50:2b:54:a2:23:61:98:5e:
                    a2:cb:5f:81:bf:d3:08:08:c1:75:bb:89:1e:9a:29:
                    c6:f3:e3:8d:7d:f6:dc:a5:a3:0c:6d:30:0d:0d:d0:
                    2e:88:7c:3f:8a:94:c9:24:c0:74:23:d4:b9:29:02:
                    d1:5c:95:98:21:3d:64:38:7d:d3:82:76:4f:57:d0:
                    8f:ea:6d:7c:aa:83:e4:fc:77:7e:d8:3c:ef:60:e4:
                    ea:a0:2b:57:8b:1e:49:97:0a:51:3b:0c:4e:70:39:
                    fe:30:cc:62:40:9c:c5:e5:f4:4f:13:aa:d0:26:52:
                    66:11:70:d3:42:1d:1c:27:c2:33:ec:77:93:a3:cf:
                    ec:43:40:ab:c0:1d:99:4b:23:81:2e:6e:ad:96:b3:
                    83:fd:86:66:6b:84:74:a3:fd:fa:1c:3a:4c:b8:1a:
                    47:56:e2:f6:22:af:62:75:50:e4:c5:4f:e8:66:09:
                    01:82:a7:74:1e:2d:29:e1:70:6e:fe:1c:71:c9:f6:
                    ba:e8:fb:91:fe:6c:15:4c:eb:aa:51:23:44:c1:65:
                    ac:31:ac:ad:ad:b7:6c:39:88:a5:50:1f:f2:45:88:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:63:02:02:CF:F1:D5:7C:EF:D9:D2:7A:CA:65:5B:8B:7D:CA:A8:61
            X509v3 Authority Key Identifier:
                keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:4e:7e:3a:3c:7e:64:b4:ac:ab:43:3a:6a:93:05:32:0c:
         3a:fe:15:b1:8d:5f:b9:a5:99:27:d8:e8:34:9e:95:ac:34:83:
         4d:15:e9:73:35:c6:aa:be:3a:a9:c4:0d:05:a5:26:b8:b2:aa:
         ab:1d:8e:84:9a:dd:2c:2c:55:22:e4:f7:4c:6b:58:f6:82:b0:
         68:4a:6b:0d:22:61:75:c7:df:d4:f5:d0:23:26:34:a0:fe:7d:
         2c:fe:e9:bc:78:15:80:74:30:e2:5e:54:f0:33:17:3c:0c:5c:
         4c:13:cd:c0:27:94:24:ff:ea:b9:21:a0:20:3b:86:87:1f:e5:
         d3:8a:05:4d:cf:1c:b3:f5:34:79:cb:c0:92:b6:3a:0f:c2:dc:
         45:10:d7:5e:b0:d7:64:71:dc:26:c3:4e:39:c1:db:4b:14:40:
         e9:32:ce:a0:bf:3e:4b:61:df:0e:3a:96:7c:bb:3b:f6:b2:72:
         37:40:6a:e2:c8:56:bc:38:49:f8:e5:a8:14:c2:d0:bc:7d:97:
         87:b7:2b:33:fc:21:fe:df:84:77:bc:8b:2c:b6:c4:ad:ab:ba:
         3a:25:f1:40:60:96:04:3f:2d:d3:cb:50:a1:e9:61:ad:fd:d4:
         d8:c8:eb:2c:21:fd:82:fe:78:0f:9b:03:c6:a4:96:63:5f:a3:
         7e:29:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----