Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File:                     ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier:          yUUkHAVYRSLDTVmFBSt1q9AD6aZPmBjjZApPs8kR2l8=
Subject key identifier:   73:51:A9:18:96:16:65:87:60:A3:86:E2:50:B7:9C:AD:59:3F:F2:D9
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer:       /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial:       01962E61BB707C876C4ECCBD8BDFEB49D9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number:          09F1
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
                          2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: YeSRjo1hFoqLAUsHE2/RxSKeOTFV2OKv4OjO32Yn1U4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bb:70:7c:87:6c:4e:cc:bd:8b:df:eb:49:d9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=7351a9189616658760a386e250b79cad593ff2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:aa:2c:16:53:34:f3:18:53:23:8e:be:f3:
                    8d:db:3d:71:cf:72:cf:44:f3:c6:a7:91:9d:65:4b:
                    3d:97:2e:7f:82:91:6b:39:f4:6b:a5:cb:05:14:16:
                    28:17:9f:51:e6:6c:8e:c8:b5:5a:9d:09:aa:c2:87:
                    29:d9:ff:d7:ae:bb:5e:8f:40:aa:67:af:69:35:df:
                    33:37:7b:2b:f2:11:47:0d:d3:76:50:10:2f:9f:c1:
                    09:87:07:e6:20:a1:6a:3a:de:32:cc:31:75:1d:98:
                    2e:70:0c:bc:3e:f2:40:52:3f:b8:42:d8:3b:6c:74:
                    a3:cf:c6:ab:89:da:29:5b:54:36:f3:2f:a0:40:79:
                    a9:c3:46:22:fc:41:81:41:85:6d:61:3a:58:6c:6d:
                    e9:50:75:c6:c2:f8:2e:73:7e:c4:c1:b8:7b:58:31:
                    08:4b:a3:f7:a4:de:d1:0b:7e:9a:f3:36:49:21:9b:
                    83:84:ff:da:b6:b9:bb:68:f7:be:e2:8b:1a:bb:1e:
                    be:a5:00:02:35:61:c6:d9:6b:8a:a6:68:3f:17:ba:
                    bc:04:c8:07:28:17:3a:65:8e:d6:dc:9d:30:7c:e3:
                    49:00:75:1d:3c:90:23:51:ae:39:c7:58:02:ca:12:
                    de:f0:06:bc:fc:65:b5:25:2f:ea:1e:84:05:1c:94:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:51:A9:18:96:16:65:87:60:A3:86:E2:50:B7:9C:AD:59:3F:F2:D9
            X509v3 Authority Key Identifier:
                keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:d1:aa:69:38:8a:0a:14:a4:e6:37:54:1a:fc:35:ee:cf:
         a8:be:8f:7d:68:03:6d:12:0a:fb:3d:c4:83:86:1e:fa:4d:59:
         33:66:2f:2c:03:d8:f4:b8:9b:81:4d:1b:f1:c5:ca:ac:da:ea:
         1c:87:e8:20:05:62:6e:11:22:1a:57:2d:46:b8:44:85:58:ca:
         8a:b1:47:86:0a:f5:d4:d5:4e:50:3b:0f:83:f3:b7:a8:11:83:
         2c:23:06:5d:95:a3:52:f9:25:48:1d:d3:06:5e:8e:19:a5:61:
         18:af:22:51:07:04:b2:ac:a6:fb:fa:52:b8:9d:c2:10:67:95:
         91:a2:3e:9d:be:c2:d0:93:9e:29:82:af:b4:0d:b2:30:81:a8:
         bc:98:d1:16:31:87:7b:63:1d:23:88:4f:1a:19:2d:28:03:7f:
         0a:17:83:0f:fb:99:76:10:c6:a3:2e:d8:e0:03:7f:9e:ec:16:
         e3:a8:a9:77:e6:36:93:d6:21:b3:a6:1a:f0:d1:be:74:0c:aa:
         53:95:c3:aa:0e:e4:71:ea:87:f5:09:34:57:31:cb:ed:46:62:
         23:f5:65:35:9d:45:1b:78:08:53:91:9d:f3:7f:1a:ec:b0:a9:
         56:d7:fb:ec:e6:f3:2f:a9:0c:17:b1:12:8b:a1:fb:d8:8a:a6:
         5e:aa:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----