Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
File:                     5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json)
Hash identifier:          klUurN5ck39SUjtGOM9vt9fVe76ETz+qboH6Cx01omA=
Subject key identifier:   30:39:6C:5A:B2:D2:90:8C:9B:3C:B3:83:5F:EE:BC:B8:79:6A:A1:90
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Certificate issuer:       /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial:       01962DF453D459013CBBE79CA4D7BC4D900B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
Manifest number:          0248
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: x6OkBhCZycfzo4S1gIwlzBSsl3A4p2fa1ftmIcdztK0=)
                          2: LC4E7CVdqve2s0imFECZpSxeumc.roa (hash: ctBI7RM04uAc4w/A50VeS7LJSTWUarW03NaBD0t5f6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:53:d4:59:01:3c:bb:e7:9c:a4:d7:bc:4d:90:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=30396c5ab2d2908c9b3cb3835feebcb8796aa190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:86:a9:e4:1c:a2:4b:f3:59:c3:af:00:46:
                    b8:63:73:5b:eb:10:73:aa:bd:04:c7:dd:cd:f3:98:
                    fd:af:90:12:de:c4:ec:c5:f0:d3:2e:10:1b:dc:da:
                    7f:70:6a:21:a7:60:d6:d0:da:b9:a0:54:e3:a6:59:
                    cd:17:61:a0:80:dd:d0:cf:13:d9:ab:a0:3d:df:d1:
                    9e:cb:ed:0b:df:cb:66:2b:44:a1:77:4c:51:af:89:
                    ae:0c:99:93:61:67:d8:f0:57:5e:e1:32:13:68:f8:
                    c7:d3:bf:eb:62:02:59:4b:5b:20:18:c1:7d:2a:ba:
                    5d:26:76:7d:e7:99:14:b1:a0:e1:5a:37:d2:9b:8f:
                    b1:ec:3d:7e:37:e3:45:f1:0e:bc:0d:2a:f3:06:27:
                    86:5d:b2:79:1b:86:be:89:a0:fe:ec:89:91:87:d3:
                    22:f0:5c:aa:88:8b:9e:27:63:3b:68:59:91:b3:9e:
                    3a:50:ad:bf:02:8b:7f:bd:62:7c:cd:ae:d3:7f:49:
                    b8:86:87:4f:51:cd:3d:1e:42:d9:7e:98:41:8e:50:
                    bf:af:60:1d:7a:a8:09:dd:a0:cd:0e:78:5b:d2:34:
                    14:d9:df:a4:f4:64:28:75:77:06:05:56:ab:30:4c:
                    71:40:7b:35:7a:39:1e:83:d7:86:95:c1:53:a3:23:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:39:6C:5A:B2:D2:90:8C:9B:3C:B3:83:5F:EE:BC:B8:79:6A:A1:90
            X509v3 Authority Key Identifier:
                keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:37:26:6b:74:fb:29:f5:cc:99:46:33:7d:be:4c:12:c5:47:
         d1:ae:d6:7c:44:36:f8:a6:c6:fc:62:22:93:71:06:09:07:a3:
         0f:91:e1:e2:02:2e:e1:0a:b8:b0:d1:fc:7c:d3:d1:6a:4c:e1:
         32:ab:92:1d:11:ae:ff:07:03:d8:b7:f3:41:82:fd:c5:ef:6c:
         37:c6:5e:09:50:66:7e:b4:bb:11:a2:72:be:57:59:23:c3:9e:
         ad:1a:80:4f:f3:9d:f0:18:37:47:4f:83:da:17:c3:80:2f:f5:
         f1:8c:cf:02:60:46:9d:ab:09:c7:ec:53:ca:e9:31:c1:31:53:
         d6:38:83:bd:27:49:8f:16:25:cd:cf:2c:70:92:23:57:83:cf:
         86:7f:f3:88:78:91:f1:96:a7:4a:e3:37:1d:d2:81:4d:82:b5:
         38:8b:8b:be:08:0c:60:22:7c:e8:3f:7e:4a:5e:5b:83:37:31:
         cb:90:61:66:af:af:21:84:4d:39:06:15:de:11:fe:12:48:bb:
         c3:0d:6d:89:55:ea:6a:0e:85:9a:43:f0:3f:df:c6:30:e4:9b:
         80:7d:e6:81:b1:e3:a0:d7:7c:b2:99:3d:8e:aa:9c:e0:21:e3:
         53:32:3a:9e:a9:8c:4f:69:bf:f8:a5:47:7f:40:9f:bd:3a:aa:
         49:05:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----