Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          w9VuuKsCiUpq2f92pqX9q834W3qEGZOIfZQRrhwe9Yo=
Subject key identifier:   C0:D0:E7:5D:08:D6:EC:7E:F3:E6:66:3C:CF:DD:40:EC:54:2E:8F:D1
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       01962FAB9D9C92091372929EBCD667CF5835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          0F5B
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: iMsHCbngFnx9O3X6raIvTzd/ng2p9huIrnbo7zkzwM8=)
                          2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:9c:92:09:13:72:92:9e:bc:d6:67:cf:58:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=c0d0e75d08d6ec7ef3e6663ccfdd40ec542e8fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:42:af:58:60:97:56:4f:e5:64:d7:86:06:
                    67:f4:05:f3:62:e9:20:6d:4b:6f:73:a2:23:8c:b8:
                    e1:8e:31:66:a1:fc:62:de:77:03:dc:72:54:5a:af:
                    72:d2:c8:06:a7:02:36:90:45:56:b3:a1:c4:78:97:
                    dc:71:a1:35:e8:e5:c4:91:2a:90:d3:66:a0:9f:1c:
                    8d:19:0b:31:f7:28:ec:38:73:f7:67:24:a0:0e:5c:
                    e3:6b:e0:5d:74:d9:df:97:33:ca:45:4d:f5:2a:08:
                    5b:6b:51:f3:48:50:96:8c:fb:15:6a:c4:e6:02:67:
                    c4:78:c6:03:2d:19:fd:bb:30:58:2a:85:7c:6d:24:
                    c0:04:57:94:ba:71:74:df:85:4a:0a:93:de:ab:5b:
                    c7:f4:7e:27:b5:21:0c:48:11:f2:ce:46:72:87:8b:
                    44:21:16:f1:f1:b4:a2:4a:36:2e:e3:41:c9:f5:63:
                    64:ff:95:c7:4c:5e:cb:af:f3:22:83:cd:dd:74:5e:
                    fb:4b:01:33:09:38:eb:a2:db:33:d5:15:92:df:a5:
                    59:09:57:f0:63:ba:02:0b:0c:73:0e:4c:5a:69:ff:
                    2a:2e:a5:fd:4b:0d:c7:60:50:25:84:65:17:27:b7:
                    39:7c:4a:3b:d9:81:3a:d6:89:94:b1:ec:38:cc:7a:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:E7:5D:08:D6:EC:7E:F3:E6:66:3C:CF:DD:40:EC:54:2E:8F:D1
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:74:5b:87:07:ea:5f:07:e8:99:e3:8d:55:75:b2:75:28:dd:
         e3:16:a1:83:d0:05:c4:5e:f9:5b:e0:81:49:38:ae:ae:da:f8:
         d6:b2:d4:cf:23:39:4b:19:80:a5:3b:87:da:94:03:84:15:b1:
         4c:e2:ec:8b:e5:3b:a2:27:71:74:51:e6:d1:fc:23:21:f0:75:
         87:05:5c:c4:a5:5e:9a:b1:9c:79:8d:1d:27:fa:38:c5:5d:1f:
         6c:af:90:0f:ae:0f:0a:5e:ef:fe:2c:1d:b2:6c:1b:f4:45:ec:
         26:9d:f4:3a:ce:06:7b:e5:81:70:35:d7:56:e3:53:87:68:8b:
         06:53:d4:d6:79:ac:58:10:c5:c5:21:ad:88:ad:8b:de:7f:09:
         dd:2c:ea:56:dc:b8:34:08:d2:04:9c:e8:b1:b6:fd:4c:16:2d:
         b0:67:48:08:da:42:23:53:99:d8:b5:6c:6d:89:6f:18:1c:e8:
         48:b8:93:a0:ac:8c:a0:27:01:92:7b:31:c1:b9:07:54:4c:76:
         9a:0e:c2:ca:0b:21:2a:72:81:c1:43:74:06:ad:55:bc:99:00:
         83:d6:e7:82:e4:68:ab:3b:42:ac:d2:90:d0:7e:94:52:d5:46:
         53:0b:2f:18:e4:37:79:63:57:9e:dd:7a:a3:12:6b:57:79:c6:
         2e:30:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----