Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          CoedStVLbFTwjRQydMWiu5Qe38M/fhajTRnnz14mwlI=
Subject key identifier:   F9:BF:82:5A:2A:A6:70:C4:06:9D:AD:B8:3C:5A:AC:83:4F:19:91:AA
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       01962E98C630F2F7D8DF50DB634DE65274ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: ohmDzZAexTi0FZI15L+4fFOiDcqqSRYFns2Z5QHwOao=)
                          2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
                          3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
                          4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c6:30:f2:f7:d8:df:50:db:63:4d:e6:52:74:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=f9bf825a2aa670c4069dadb83c5aac834f1991aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:83:56:b9:da:27:e1:fe:29:e6:48:6e:93:
                    33:66:1c:34:69:1e:82:7d:a5:a1:11:ce:3a:9a:b6:
                    62:3a:00:fe:03:7e:27:fe:53:39:5e:61:e1:6c:90:
                    e9:47:8c:fc:c1:73:c0:f4:e4:29:d0:ad:cc:89:d7:
                    2a:8b:60:9e:83:d1:cb:4e:d5:5c:78:d5:bf:23:df:
                    ba:a8:81:eb:52:85:df:2e:81:ef:de:30:97:7a:56:
                    7b:57:b5:17:46:94:f7:74:09:01:6e:84:dd:55:3d:
                    99:a8:cc:2a:d8:e4:d9:07:a7:9b:e9:65:e6:fd:2c:
                    d3:02:6b:a8:07:82:3e:6e:21:66:45:91:ab:65:7d:
                    28:45:f0:06:45:23:01:a0:5f:b6:4a:d6:0c:85:00:
                    70:2e:21:8d:24:50:f3:d4:b9:a5:2d:62:b9:8c:f5:
                    da:a3:7c:50:7e:8a:2b:53:27:c0:23:55:98:cd:0f:
                    5a:19:3e:e6:07:b9:38:8e:56:a6:bb:7d:ce:0c:f0:
                    fc:9c:9c:00:9b:72:df:a8:a1:55:1a:ca:0a:04:0b:
                    90:31:c2:13:cc:fe:85:9c:54:77:35:a5:55:fb:af:
                    58:65:13:8d:ef:8e:56:e8:43:63:f5:fa:73:20:74:
                    44:14:b6:50:28:41:5e:d3:9a:b6:4a:22:c3:eb:c3:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BF:82:5A:2A:A6:70:C4:06:9D:AD:B8:3C:5A:AC:83:4F:19:91:AA
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:36:7c:68:b1:72:a6:c2:4b:8b:ef:f6:37:92:76:e0:dc:b1:
         25:78:dc:62:dc:40:a4:5e:7a:4d:a4:7c:71:c2:87:41:df:56:
         36:d4:87:dd:42:f3:03:e3:5d:30:04:13:88:de:cf:d0:11:e7:
         61:5c:fa:83:cb:b6:f6:2a:ab:02:c5:0b:2d:14:c1:c4:04:0a:
         3b:e5:81:15:95:95:84:d6:cb:a7:0c:97:78:01:97:7c:71:3a:
         c4:af:2f:36:58:c1:21:9f:91:01:55:aa:2f:00:60:24:bf:c6:
         78:36:75:c1:fb:58:06:e2:44:28:bc:35:22:fb:0e:7f:a9:59:
         7d:ed:2e:ad:f4:c6:da:f7:57:e4:ac:f6:32:6a:75:ef:b2:84:
         0b:95:3f:bf:6d:a8:f5:9e:e4:63:f5:7c:8a:c3:fb:f3:05:4d:
         ec:3a:a5:59:43:2c:4b:de:3c:c7:95:d9:18:20:bb:91:a7:07:
         08:48:a0:0f:cc:bf:ff:8e:b1:e2:fa:77:0d:81:4e:5a:61:f1:
         6c:ea:37:7c:21:fd:59:ca:58:3e:e3:ff:55:5f:7c:84:f9:d7:
         cd:f0:81:19:1c:95:12:30:14:37:1e:e0:eb:f2:fb:6a:fc:71:
         3f:80:ea:8c:68:f4:8a:d8:87:0b:ef:14:24:b7:38:84:4a:2a:
         bc:89:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----