Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          5aWmh6Yf9QTZDc1x6TU/HSmAcFRkDqiNaF2u9dieoOU=
Subject key identifier:   E2:62:EA:36:2E:C6:BC:E2:75:9B:28:C0:4D:EA:8D:CD:D9:01:59:FA
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       01962F06625BD87FCBCDFC50D6A600057D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          0B77
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: gNvcMxQHCzsUK5B4NY76DtOUGYgcRWS1nCU/48FzItc=)
                          2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:62:5b:d8:7f:cb:cd:fc:50:d6:a6:00:05:7d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=e262ea362ec6bce2759b28c04dea8dcdd90159fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:2d:d4:19:6c:5d:88:9e:50:1a:88:10:c6:
                    0f:ef:24:fe:ee:74:70:e9:31:28:32:9f:a7:34:9a:
                    f6:84:63:c3:db:03:f6:1d:e0:58:37:ac:20:66:d0:
                    41:3e:48:4f:91:5f:4e:66:52:01:26:b3:96:f5:fe:
                    3b:8f:ee:2f:93:b2:95:05:45:6a:2c:c2:bf:54:50:
                    e6:c7:35:24:0d:47:5f:b1:d1:58:43:5f:73:39:8d:
                    ba:38:1b:56:8c:75:4c:bd:97:d4:df:01:58:45:29:
                    5c:e9:76:23:ae:2f:10:a0:1b:59:31:46:82:fc:e7:
                    ca:18:28:07:38:62:87:eb:9b:7d:eb:99:81:05:b8:
                    8d:71:57:54:b7:9f:8d:c0:6f:0d:e3:b2:61:cc:55:
                    dd:dd:35:b1:30:87:af:84:96:60:1e:f5:40:fe:01:
                    b5:89:cf:18:9e:60:3c:d8:e9:47:ad:2e:28:a0:6a:
                    97:38:30:db:d4:3b:d2:5d:8a:68:8c:d1:0c:ea:89:
                    21:56:fe:29:d5:c2:f8:7e:81:e5:e5:99:a5:9e:56:
                    26:28:4f:cc:7e:17:0c:11:52:e1:50:85:20:ba:6a:
                    a3:47:f7:a9:a9:55:84:13:30:c6:21:13:6d:ad:30:
                    13:72:ee:96:82:b9:b0:42:45:ae:f9:75:81:43:12:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:EA:36:2E:C6:BC:E2:75:9B:28:C0:4D:EA:8D:CD:D9:01:59:FA
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cf:27:03:0a:10:24:3a:0f:b6:73:90:3d:d6:29:d5:54:b7:
         24:3a:94:b8:f1:99:0d:68:8b:b7:53:bf:75:d3:f1:fb:da:ef:
         db:88:98:f1:ae:86:c5:b3:7a:1a:c5:5c:f1:a5:91:c4:b2:b3:
         3b:4a:b1:b8:bb:d6:bb:c2:7d:c7:b7:f4:96:ab:59:97:df:44:
         5c:b2:b4:25:30:5c:77:49:40:88:0a:9e:d6:3a:1e:e2:9e:5c:
         32:59:84:d1:bb:de:fa:a8:b9:73:2e:6a:c4:43:4e:62:e0:ac:
         02:2d:db:fd:ab:c7:ef:a6:aa:e6:78:44:61:30:8d:1c:e3:80:
         2b:d1:c0:44:0a:2e:5b:3f:5c:12:d0:b7:0d:98:81:30:53:29:
         20:66:62:18:d8:21:03:0c:d7:cc:ad:1e:5f:81:91:24:aa:21:
         fc:e3:50:ad:22:26:d4:af:8e:ea:ae:fd:fe:00:8c:32:84:63:
         ea:17:8d:d0:92:b9:ae:85:c9:e0:9d:83:6e:6e:08:2d:dc:f9:
         2e:63:d1:13:cc:78:b2:e1:1e:c4:30:c4:e7:8c:89:4e:cb:7f:
         57:55:5a:43:db:fa:55:8d:a7:b2:97:a9:9d:33:98:42:4a:33:
         a8:c0:71:f9:84:09:4d:20:14:9c:ee:d0:0e:0a:80:b8:b6:86:
         5c:05:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----