Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File:                     5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier:          iX8nOIz4QI/nJMx/uYLxCNIcwjwfDQy/xPrThXbx+Gk=
Subject key identifier:   62:EB:1D:EA:F9:33:60:A5:E1:22:59:49:21:44:42:8E:7F:1A:26:34
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer:       /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial:       01962F070A160CE94C0A1C2D2ECCF18EC5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: o9Fi+GMwddTruTz8jhtGlcCX9uh675udA17v6hDmxMM=)
                          2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
                          3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:16:0c:e9:4c:0a:1c:2d:2e:cc:f1:8e:c5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=62eb1deaf93360a5e12259492144428e7f1a2634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:59:0b:f9:a3:71:42:55:8f:76:f3:ed:9d:
                    e2:cf:ac:af:e9:ad:27:d3:31:43:53:34:28:6d:79:
                    fd:86:e9:81:9f:c8:d3:ed:c2:35:15:53:66:9e:80:
                    05:be:08:f0:40:a6:b1:36:2c:0d:bf:e8:80:80:76:
                    8c:5c:59:32:25:a5:1f:3d:77:aa:5d:e3:16:18:33:
                    09:01:96:cc:08:d6:6a:e3:a6:6a:66:4a:93:0f:d3:
                    23:07:09:af:6e:a6:a0:1f:01:36:ae:0b:d3:81:f5:
                    43:9d:68:c5:b8:77:d7:4a:f8:6e:16:fd:3e:35:60:
                    fd:ef:af:c1:ab:a8:4e:32:9f:4f:d7:68:12:82:d4:
                    6c:28:94:f1:1d:c6:25:80:a1:09:3c:87:47:df:51:
                    fd:31:c7:88:22:87:de:26:d9:08:3a:88:88:26:94:
                    ef:41:d2:26:6d:6f:51:f1:10:4f:10:59:a0:78:aa:
                    de:12:b1:07:80:88:c8:c0:69:eb:86:88:bb:5a:84:
                    17:f5:d6:03:f6:27:39:ec:39:05:3c:a6:bf:c1:08:
                    ba:f1:03:da:01:63:0a:fb:59:b7:bf:78:b3:9f:d4:
                    5c:c0:f1:9c:72:9c:c6:cd:33:2e:17:23:f5:a8:34:
                    6d:da:78:a1:cd:59:0e:6e:da:a6:81:91:c2:7e:27:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:1D:EA:F9:33:60:A5:E1:22:59:49:21:44:42:8E:7F:1A:26:34
            X509v3 Authority Key Identifier:
                keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4b:45:3a:27:2e:bc:2d:b1:f4:05:22:06:55:f0:6f:c6:8a:
         37:f9:90:c6:6d:9a:1f:53:c4:ea:7f:d4:a0:4c:d3:d2:ff:b8:
         4b:34:d3:4e:0c:03:34:70:4b:e8:74:0b:04:3a:32:b7:d4:a0:
         6a:89:69:eb:81:03:ec:2a:46:79:45:04:a1:a0:af:0d:1d:52:
         5b:df:bb:02:2e:f3:25:d6:e6:9a:99:15:f7:80:83:19:b4:da:
         ca:5c:bb:5b:93:5e:b7:8d:79:1f:50:1e:11:2e:c5:b9:ef:b1:
         37:26:09:8a:41:45:27:4c:4d:a8:af:c2:6b:28:0e:34:c0:93:
         8e:29:05:ba:b7:73:a2:d3:b7:d2:bb:f9:a8:65:f1:46:ba:a0:
         7e:39:fb:c1:d8:29:53:6e:15:e0:bf:e6:57:08:44:84:5e:07:
         c7:0c:41:e1:33:d0:a9:eb:9c:fc:fd:14:43:07:83:aa:e1:28:
         59:9a:9f:df:48:3c:1b:d1:93:c1:8a:a2:e4:0d:26:1d:21:0b:
         40:11:4f:16:f3:06:99:89:6f:8a:e8:65:a8:fc:d8:02:07:52:
         a4:d5:36:6d:b6:ae:f9:ee:20:81:1a:6f:6c:fb:08:00:ce:ea:
         9f:ff:e9:61:f4:d1:e8:5d:d0:5d:02:e2:4a:d2:79:50:d2:0c:
         bc:86:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----