Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          MkpvqiZ98VotniGJW5PXs7XfKN/69gt1unpUNYNjxoU=
Subject key identifier:   A8:6F:31:27:8F:C9:0D:E9:6F:72:5D:58:8B:37:B2:3F:00:82:6B:5F
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       01962E98C523664BAB0857061B71B00CCBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          102A
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
                          2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: EbK2Kexo0qAxreio1D8YOvqHhVntfQxJv2FlmUdMvrc=)
                          3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:23:66:4b:ab:08:57:06:1b:71:b0:0c:cb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=a86f31278fc90de96f725d588b37b23f00826b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:2b:e7:88:60:4b:9d:22:bb:0e:68:eb:9e:
                    64:6c:72:26:2b:4f:16:3d:e0:2f:2c:4a:17:db:41:
                    c9:d5:19:08:6b:e2:6c:fa:99:06:d0:e4:bd:a4:61:
                    55:4c:da:51:73:22:ad:e7:34:82:66:91:6c:5c:16:
                    91:6b:3f:13:61:b8:e1:56:bb:9d:03:7c:15:2c:ad:
                    4c:1f:f1:6f:93:c3:e7:d4:1c:89:34:71:c0:0b:6f:
                    4f:42:24:68:e1:2f:22:33:8f:bc:65:40:90:fc:81:
                    5f:93:9a:4c:13:1a:01:6b:f1:86:ce:e8:7c:62:d3:
                    db:f4:1e:af:c0:98:cf:5a:23:7a:8e:12:3c:62:1a:
                    bb:bd:2d:50:ad:be:b8:de:14:db:6e:b0:6f:49:e5:
                    0b:41:17:aa:06:ba:73:5c:f0:eb:0c:12:e1:7d:41:
                    54:d6:2d:e6:9a:73:76:f0:40:06:79:d0:8c:90:87:
                    58:c6:3b:2f:77:1b:87:79:cc:6d:36:d3:7c:f8:a4:
                    63:f1:2b:e2:3b:5a:20:2c:c8:92:9c:c3:35:df:bb:
                    45:24:a7:1b:b9:dc:05:88:4b:de:e7:10:a9:0f:bb:
                    7e:0e:ec:e9:28:14:90:c0:70:75:e4:4c:fa:03:57:
                    7f:a1:02:81:5d:f7:16:e2:40:4e:87:71:1d:97:b5:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:31:27:8F:C9:0D:E9:6F:72:5D:58:8B:37:B2:3F:00:82:6B:5F
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:b7:34:74:71:6f:57:f1:4e:8f:b7:91:59:e9:e9:61:b9:
         b8:71:45:35:e1:b2:49:f7:ee:19:61:d4:bb:88:10:4e:11:09:
         2e:2a:4c:01:3f:00:00:02:c9:1f:2c:b8:0e:bf:82:cf:af:14:
         3b:37:e1:2a:7d:9c:bc:af:45:66:9b:de:b2:bb:33:67:4d:c4:
         3f:94:e1:34:97:88:f6:aa:1e:81:9b:1f:d9:32:33:e3:f9:8e:
         ae:39:d9:40:cb:bd:66:ad:ef:1b:cc:bc:c6:b4:b4:ad:3e:be:
         3c:25:51:4d:f6:08:f1:7c:c6:53:66:27:5b:36:a5:9a:2e:f9:
         6b:a6:ed:3d:73:21:7b:a7:3a:07:c0:5c:ad:05:84:62:98:59:
         64:6a:0a:d3:e3:ca:d6:75:7e:13:8c:f2:ae:51:59:af:5e:97:
         80:ec:4e:7f:82:79:7d:f2:94:21:f2:69:64:31:69:d4:07:ef:
         97:8a:a4:87:d7:13:4b:30:a6:71:05:d9:4b:72:79:3f:1f:b2:
         0d:ad:c5:80:48:52:3c:7f:af:db:b6:c3:7f:e8:84:27:e2:7d:
         b3:79:84:e2:cd:99:75:68:b3:dc:f7:97:38:a1:c4:82:ca:ed:
         aa:e8:5d:7d:42:87:53:bf:4d:a3:46:6e:8e:89:94:1e:c8:f3:
         f4:d1:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----