Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          ZU27LXaAiQz8c8p0jYYmTTq9XD0wBSaN88tv9ghgIVc=
Subject key identifier:   DE:41:41:34:73:4B:F5:41:65:29:D7:94:76:BD:CD:FD:3C:AC:F2:AC
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       01962F2F6E95B6250517F3BB0FCEB66F5193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          0DED
Signing time:             Sun 13 Apr 2025 12:45:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:45:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:45:59 +0000
Files and hashes:         1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
                          2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: W9eh0QPZaOdND6NiL32l5i3e7Uv7EpfZ1dAGKXg6AVo=)
                          3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
                          4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
                          5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
                          6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
                          7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:2f:6e:95:b6:25:05:17:f3:bb:0f:ce:b6:6f:51:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Apr 13 12:45:59 2025 GMT
            Not After : Apr 14 12:45:59 2025 GMT
        Subject: CN=de414134734bf5416529d79476bdcdfd3cacf2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:f9:19:30:ab:49:a3:b7:27:6c:a3:5c:cd:
                    74:a5:7f:16:cf:27:7d:d4:25:5e:1c:51:6e:19:f2:
                    bf:0c:85:17:16:a6:e9:c1:7e:fa:91:76:a8:dc:cb:
                    ce:fb:08:97:36:5f:20:6b:bb:40:4c:8d:72:a0:cd:
                    86:1e:62:2f:c3:45:d5:17:55:e8:d5:ed:24:e5:82:
                    e7:60:a4:9e:00:c7:c2:2e:2f:b3:c2:23:f2:f3:9f:
                    9e:ec:db:36:3f:91:ac:de:41:ac:1d:88:da:03:df:
                    36:7a:cc:36:0e:99:09:59:c6:f5:7e:b1:85:c3:b9:
                    76:5a:92:52:8c:88:81:48:9c:9b:80:97:fa:f8:ca:
                    d7:3f:75:83:0d:50:d0:b5:8d:21:27:5e:c4:f5:61:
                    1b:17:6e:bb:5a:09:28:76:1c:d6:8c:36:18:a0:d8:
                    77:4d:c0:be:cf:04:35:01:6c:92:de:3b:de:1f:2f:
                    c4:cd:c2:fe:05:e0:39:a5:ce:36:ed:eb:d2:74:e6:
                    97:2a:dd:36:16:8f:31:5e:c5:76:cf:d6:ea:ca:99:
                    f4:d7:22:9d:13:da:d7:8c:7a:e2:97:d0:2c:f0:bf:
                    f1:7c:b8:4d:98:b8:0d:f3:3b:5b:b1:45:48:44:00:
                    fc:14:a3:3c:f4:0c:94:5b:d0:64:b6:15:a2:1d:0e:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:41:34:73:4B:F5:41:65:29:D7:94:76:BD:CD:FD:3C:AC:F2:AC
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:18:66:d4:d6:79:de:fe:ac:fb:43:25:82:5d:f5:86:54:
         dd:e4:08:df:d9:96:cd:3e:16:dd:91:fc:23:4d:94:d0:2e:b7:
         04:e4:89:af:d7:a7:91:f2:4f:77:b7:0a:05:1d:53:df:12:da:
         9b:78:df:8e:47:e8:ab:93:db:eb:ec:dc:dd:77:91:a1:e4:8c:
         aa:a5:7e:64:48:a4:c2:10:48:6a:e7:3a:5d:4b:84:11:f7:6e:
         11:48:ad:1f:13:42:4e:82:47:a3:74:86:d0:f9:78:06:6a:cd:
         ea:04:ae:be:84:f5:c3:82:ee:69:e6:58:a0:1e:45:be:29:db:
         fa:11:00:dc:fd:6e:65:83:f1:f9:d6:b4:06:68:9d:30:75:b1:
         6c:fa:33:65:19:06:43:52:20:98:e5:0d:10:be:5f:e1:aa:72:
         82:19:e5:5f:0a:87:b0:be:42:bd:87:ae:ba:8d:88:5a:97:d4:
         a4:5b:58:73:2e:47:e9:d2:f5:8d:91:05:de:8a:e6:9a:51:f9:
         7b:db:2f:ce:60:e7:68:90:93:75:e0:65:a7:2a:c2:76:af:dd:
         63:af:cd:27:21:db:ae:7a:9b:15:c8:6e:e4:4c:32:9f:48:b1:
         32:7f:91:a9:ea:3a:7d:51:d2:af:0c:70:48:0d:d2:69:83:58:
         63:ce:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----