Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File:                     p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier:          wg1BJjoAEubmdUmxD28gS3SpfihtpjsMprVvBjBGwBg=
Subject key identifier:   6B:55:BA:E9:4A:07:A5:30:28:50:E3:08:84:D1:61:5D:6B:E1:DE:31
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer:       /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial:       01962E98C9DAF5450211049157C54281D01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number:          10D7
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: YpUNouzLsZ33T3oor6toEqNqDN6mCQTQuYecYXMhHCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:da:f5:45:02:11:04:91:57:c5:42:81:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=6b55bae94a07a5302850e30884d1615d6be1de31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4e:e7:39:4a:aa:a7:23:14:e1:ab:33:34:5a:
                    27:9f:97:75:60:ba:59:52:69:8d:d6:87:2e:cf:91:
                    06:2b:18:9c:a2:dd:68:97:95:11:09:af:71:7e:b5:
                    96:17:63:13:ea:71:53:19:85:49:cd:65:3c:29:4a:
                    4d:ea:ad:99:ca:be:ff:16:a4:4c:7b:27:06:4f:3b:
                    83:ed:a0:c3:80:99:1a:d9:11:62:6b:a1:1e:63:d4:
                    b5:93:7b:dd:42:0f:af:04:f2:4f:64:d9:a3:eb:ed:
                    a6:9d:a8:db:28:c3:39:08:4c:34:c4:6a:08:1a:7f:
                    f9:95:b4:4c:f7:ed:34:90:0c:c4:d5:e0:d3:bc:bc:
                    9d:e2:e2:60:8b:fb:e4:df:63:f3:cd:4a:64:b2:d5:
                    8e:71:73:f7:de:2a:76:34:7b:22:6e:df:ef:6d:4e:
                    e1:fa:45:b0:ef:ff:ce:96:f3:17:40:17:5e:fe:5f:
                    1e:2d:08:c9:0d:d5:45:6e:11:f5:23:00:ea:30:6c:
                    e1:fe:0a:c4:fb:4f:f1:ea:b4:67:8d:48:8f:80:4d:
                    d4:fc:17:4a:66:a3:af:22:c6:fa:b8:92:8c:2b:5e:
                    dd:b2:d7:e6:47:31:1f:04:73:f9:33:39:05:a2:41:
                    b1:2c:7c:84:0b:d9:fc:28:18:90:7f:82:1c:e2:16:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:55:BA:E9:4A:07:A5:30:28:50:E3:08:84:D1:61:5D:6B:E1:DE:31
            X509v3 Authority Key Identifier:
                keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ac:39:b7:8e:22:7d:c3:da:2c:82:31:42:e8:a8:39:2e:08:
         73:dc:8f:95:16:f1:64:18:13:0a:58:eb:4c:18:e7:d8:88:89:
         3f:70:e3:c9:df:21:a2:a2:c8:bb:7f:38:99:02:44:1e:44:3c:
         42:96:b3:34:12:98:a2:09:d8:36:da:c8:d1:7d:82:3e:00:5a:
         3f:2c:cd:ba:c8:01:0a:61:d4:8b:48:0e:40:55:fe:32:d4:38:
         19:5a:2b:70:40:9c:c1:dc:97:8b:82:cb:99:55:ec:00:b9:ac:
         89:b1:93:08:07:c7:b3:fc:8a:65:da:b5:7c:e0:0c:c3:62:e0:
         94:d3:b4:97:27:ec:b4:76:9a:85:36:02:72:75:dc:bc:39:c7:
         23:62:f2:bb:37:c4:f7:b2:54:09:b1:44:dd:a9:55:cd:10:c4:
         bb:7a:a6:6a:50:e3:d1:54:45:d6:97:fb:01:4a:98:58:26:84:
         bb:e3:03:2d:0c:1b:62:2f:16:a3:d3:af:03:80:c8:57:c7:13:
         96:ad:22:fb:fd:bb:63:c6:dc:9d:b0:02:82:fe:30:8e:b5:4c:
         f4:66:c3:af:81:01:13:9c:d3:3c:a5:b8:04:f3:ed:2f:7d:12:
         5a:72:85:72:15:fc:db:e7:da:7a:d6:49:8f:fe:0f:14:e4:65:
         55:e8:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----