Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File:                     0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier:          tv5pK7BZ5an0qPa25TxNFJvan4UziO8Wm5IlcfTli1A=
Subject key identifier:   E4:C8:F1:DB:24:77:33:28:A2:2A:78:9A:00:B1:B0:84:FC:E9:02:DE
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer:       /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial:       01962F3DC7A33C8A8B73EBB5DCD695932476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: tQB63P5yMXwOXD3/7t8usnJNAShRlFJgohK4B0kwwJM=)
                          2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c7:a3:3c:8a:8b:73:eb:b5:dc:d6:95:93:24:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=e4c8f1db24773328a22a789a00b1b084fce902de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:5d:9a:d3:7a:74:20:65:9d:2d:74:3d:71:
                    cf:51:eb:e1:fb:78:e3:7e:6c:6e:56:f5:aa:ee:11:
                    b9:d6:26:75:4a:db:69:53:c6:54:d5:5d:53:51:2a:
                    0c:e6:3b:56:15:49:f7:d1:74:e8:17:ea:29:df:86:
                    c0:2a:b1:9b:10:ba:c2:ed:c6:00:b3:65:81:7d:0d:
                    d9:f5:57:a3:8a:48:60:71:b8:fd:98:ca:62:41:77:
                    ec:bd:8e:78:f7:b6:88:cf:7f:29:fd:c9:6f:c8:4f:
                    d0:2c:c6:98:ad:cb:0e:de:2a:c2:eb:f9:f9:a3:82:
                    93:47:2b:f0:1e:f2:c9:31:68:bf:5e:af:dc:36:2e:
                    bc:43:55:6d:8f:be:b4:85:64:09:f0:41:53:69:11:
                    34:44:d6:bb:8d:13:df:ad:26:6c:3d:a3:34:b4:7b:
                    cf:57:bb:28:a0:51:d3:c8:96:be:42:03:8a:1b:11:
                    29:7e:86:da:d2:c3:1a:68:a8:ff:da:2f:8b:f6:28:
                    8d:dd:db:dc:2f:8a:43:9c:3e:d4:56:1e:ff:f0:10:
                    8f:d0:17:65:71:ff:9d:1c:f1:18:46:d2:cd:5d:cd:
                    28:30:02:26:1e:b7:ce:7e:2b:3c:b9:09:b6:7a:c5:
                    fa:23:60:59:d8:fa:df:46:e0:60:b2:65:dd:ac:a4:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:F1:DB:24:77:33:28:A2:2A:78:9A:00:B1:B0:84:FC:E9:02:DE
            X509v3 Authority Key Identifier:
                keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:5b:a1:cb:10:e1:bf:39:7c:f4:b6:7f:53:c0:08:89:ff:
         f8:96:05:af:9a:cf:07:23:ba:26:ca:c4:21:e8:0f:41:da:1c:
         ce:01:63:4a:a0:23:fc:14:71:07:cd:28:6a:7c:c8:52:9e:78:
         4d:f1:ab:21:8f:86:62:95:d7:9b:22:72:f6:26:4a:f9:b7:78:
         b4:c9:f1:be:71:a3:86:aa:fc:d7:e8:ce:c1:9f:fd:9b:50:b6:
         a8:5d:25:ff:a4:71:af:e1:19:e3:5d:62:b4:ef:ae:74:40:93:
         26:99:4b:a7:59:38:ef:bf:a6:87:d3:a1:3b:b9:8a:a5:3c:73:
         bd:75:fd:73:57:7c:c7:c0:6d:ab:a2:f2:8d:51:c4:b2:c5:ec:
         b6:e0:43:1b:e3:46:d5:05:0a:29:8e:7d:31:66:58:93:db:ca:
         d1:e2:cf:d3:db:71:6c:99:68:89:97:28:5c:02:fe:5b:5c:c0:
         73:d0:15:2c:ee:98:1e:0f:68:ed:bd:be:5b:1e:0f:b2:58:71:
         5b:6a:d4:cb:81:2d:65:d1:e6:09:ca:1d:d9:ea:8a:b7:9e:b2:
         5b:3b:5c:3f:49:5a:d5:20:81:b9:a7:75:f0:25:ef:07:d9:36:
         90:25:29:6e:47:63:f4:8e:da:95:bb:b9:60:73:02:df:89:65:
         2f:86:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----