Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
File:                     X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json)
Hash identifier:          vx24kUN8LB2nm37cWAl4rpLPnh4/A0kiYvdI9EjPKIc=
Subject key identifier:   CA:29:91:84:A4:91:04:5D:54:FB:70:14:AC:45:47:FD:1C:40:A7:C3
Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26
Certificate issuer:       /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
Certificate serial:       01962FABA36919BA095BCECD4713C0816F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft
Manifest number:          04D7
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: Oy/pRGF/b6RgCzlYAQqP1N4sjyf4GI3YY5zAw4SE3qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a3:69:19:ba:09:5b:ce:cd:47:13:c0:81:6f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=ca299184a491045d54fb7014ac4547fd1c40a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:fa:f5:c1:f7:d2:40:51:70:7a:ba:50:9a:
                    53:86:e1:0d:5a:4b:ac:f5:3d:68:9d:08:3c:79:c8:
                    4c:46:4d:39:a8:dc:79:7c:bd:3e:f8:fd:ce:fb:cf:
                    36:88:33:e2:46:db:e7:0f:1e:a7:9c:1b:60:5c:fa:
                    00:b2:16:d0:48:8e:d4:42:49:16:c6:62:1d:eb:d6:
                    d3:d3:2b:c3:2a:b5:ed:ea:58:aa:77:67:06:58:52:
                    72:f0:5b:b2:de:47:af:b3:51:07:a4:a1:39:af:6e:
                    97:99:9a:0e:94:e0:9a:0e:8f:ad:7c:80:e7:b0:81:
                    d7:3d:af:3a:66:2a:fe:05:85:01:7f:c3:5a:17:e6:
                    a8:d9:41:6d:5a:0f:6f:a3:07:65:7c:0d:28:91:d3:
                    93:05:15:35:ce:f4:b3:19:2d:1e:dd:4a:8c:99:f3:
                    3a:c3:28:09:ae:85:f2:90:44:2c:58:b2:92:72:32:
                    04:da:a0:9d:d5:3f:6c:7c:e3:87:6f:9b:76:96:70:
                    94:1a:df:60:c3:c8:1c:ff:0d:c9:82:6f:1a:71:0a:
                    4f:aa:b9:27:e2:25:39:63:51:96:01:43:64:2f:c7:
                    ee:ac:bd:0e:c4:d9:0c:ba:1b:1b:0a:b4:a2:7c:eb:
                    4e:d1:3e:aa:a2:59:15:36:87:b6:c6:0c:a6:6b:e2:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:29:91:84:A4:91:04:5D:54:FB:70:14:AC:45:47:FD:1C:40:A7:C3
            X509v3 Authority Key Identifier:
                keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:48:80:c2:8b:c4:f0:3c:9e:f7:79:da:9e:38:4b:ec:2d:cb:
         92:e3:17:4c:87:a4:cd:14:23:64:b7:69:eb:98:fa:42:d8:e4:
         31:49:37:52:e9:83:02:ad:c1:d7:8b:8c:ec:df:f9:3a:91:12:
         3f:24:4d:c9:94:ae:b4:5c:61:be:3b:7e:a5:9f:ed:2e:2f:ee:
         ac:c3:94:4a:3e:09:35:6a:dc:9b:be:21:1e:b4:03:23:c4:be:
         52:8c:e7:9a:6f:62:a6:cd:0d:fd:b0:80:7f:64:f9:89:27:b8:
         a4:ce:4c:70:46:7c:ec:1d:84:b2:7c:a6:0c:6f:d4:e2:b2:15:
         c5:b2:59:51:04:07:f3:0e:72:d1:88:59:29:47:e2:2e:e9:de:
         d3:bf:df:61:8a:45:4b:38:84:61:e1:14:f6:0d:a5:4d:5e:92:
         ce:f9:90:12:5c:aa:5f:6c:7a:e2:44:62:e3:37:b6:26:5b:ba:
         12:0b:1c:91:85:06:78:6b:4a:a7:a2:50:11:0a:a0:e7:3a:60:
         ad:70:4b:e7:99:28:d4:dd:e7:81:18:1e:de:3d:b3:27:fd:ea:
         23:eb:85:dc:09:c0:d5:db:8e:0a:23:5b:dc:5c:07:35:89:9d:
         f3:99:5b:8a:9b:fb:56:b7:d0:9a:7d:33:98:8f:34:57:1c:55:
         95:25:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----