Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          Pz7A5Igq7fP/QkKczhYMlh0w97IsB/vN3vN17eJ1e38=
Subject key identifier:   68:7B:F8:4E:FC:9B:CA:41:CA:8E:32:0A:00:29:04:A3:91:26:9C:BD
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       01962F74B272C5877DDFC67A55399DFBBD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: n1tN1bhyqtqaGMynxw2kcRNLqHkqQM8o5Pe6QcBvrWo=)
                          2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
                          3: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
                          4: i0nThbwdezW0AO7pmekkEJjld0U.roa (hash: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=)
                          5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:72:c5:87:7d:df:c6:7a:55:39:9d:fb:bd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=687bf84efc9bca41ca8e320a002904a391269cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:b7:8f:d8:9a:ac:ce:4f:29:ac:ed:c3:46:
                    98:eb:7b:e3:75:e3:89:26:4e:19:bc:84:e4:0f:f0:
                    bb:cf:45:bb:09:32:35:f5:54:31:6a:70:10:54:ab:
                    c1:c4:37:00:da:02:27:56:87:90:ce:9d:0c:99:e5:
                    d8:39:e5:a1:0e:fb:e3:db:f2:25:a9:fd:9e:81:23:
                    87:ee:5b:b3:e3:d0:51:00:dd:c2:b5:11:00:97:ca:
                    0b:52:d2:87:7b:e2:64:65:b4:3d:ba:86:e6:59:e8:
                    ae:81:5a:b2:0d:85:b6:12:be:e5:c0:5a:91:98:5a:
                    27:d3:8d:9b:ca:d3:aa:f9:35:eb:db:99:f3:6c:bf:
                    39:31:f3:ab:38:62:c6:6b:2d:a1:41:ba:1e:33:e2:
                    cc:3c:f3:7a:9e:82:ff:6a:11:68:1c:93:d6:a8:1e:
                    88:47:63:aa:d8:6e:75:f9:3c:da:0e:de:b4:44:c1:
                    ad:0b:fc:9a:98:8b:fd:98:fc:36:00:de:15:f0:63:
                    f2:72:10:af:2a:a2:78:43:4a:a1:f7:29:33:85:66:
                    33:fa:d4:c4:05:84:da:0c:9a:6b:db:a9:16:d1:2c:
                    b4:9e:0b:1d:ef:1d:f6:99:0f:d1:f3:4d:32:aa:79:
                    64:9b:de:ab:4e:3a:b2:28:12:d1:61:24:8e:61:d0:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:F8:4E:FC:9B:CA:41:CA:8E:32:0A:00:29:04:A3:91:26:9C:BD
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:eb:f2:ab:15:38:33:1f:1d:6d:15:d4:b7:35:04:dd:7e:
         32:8e:99:af:cb:50:58:bc:18:d5:00:3b:eb:87:e9:f1:53:57:
         b8:99:1d:01:c9:0e:40:6b:68:a2:be:ad:bc:80:3e:a8:a4:5d:
         67:bc:e6:36:24:b2:1b:07:d5:93:34:3b:e4:b1:af:14:1e:de:
         1d:44:d7:27:dc:b5:cd:e9:1d:7e:c0:8a:bf:ce:89:87:60:60:
         db:cd:88:24:b1:9e:8f:1f:d7:2b:03:5e:41:13:d6:b0:5e:4f:
         4c:f9:76:56:42:4d:5a:ce:d5:2c:ee:9a:50:9e:98:85:38:0e:
         2f:89:1a:94:f4:8c:9b:c0:5b:e5:54:8b:c6:23:1f:03:83:98:
         b7:6a:b2:56:1f:38:91:46:fe:a6:a0:54:1c:83:cf:67:c1:80:
         7a:fe:b3:b4:6b:4d:e8:76:1f:21:3a:f5:8e:30:f3:1e:f5:b1:
         7d:69:0a:3d:94:9e:3e:96:eb:6d:1f:c9:be:aa:36:1d:84:1d:
         81:b7:fc:83:11:ce:63:4f:ef:05:d2:3a:60:4a:80:dc:1e:4d:
         21:43:bb:d0:ca:c7:a8:e0:54:5d:ef:2f:ef:56:73:35:06:85:
         0b:eb:8d:74:9a:b1:0c:c1:59:dc:92:f7:dd:32:60:48:0f:58:
         22:19:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----