Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File:                     5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier:          HAViAdEafrqbBbHCzSQATr0WZH50XFQ23rK4cZ04hJ8=
Subject key identifier:   EA:BF:1B:23:9B:90:70:5B:E5:0F:D4:8E:3F:B3:3A:B5:03:63:11:73
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       01962F3DBF850134D90AEBC51E32903B6C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: n33jCxE6k9qqIJlQKq20j5gF7yTj9ahNY2dIEeqlTXc=)
                          2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bf:85:01:34:d9:0a:eb:c5:1e:32:90:3b:6c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=eabf1b239b90705be50fd48e3fb33ab503631173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:4e:d8:75:51:2b:89:5a:4b:f5:d7:73:2b:
                    e1:ed:14:89:f4:4d:e0:5b:ec:8d:75:3a:bc:d0:fe:
                    14:91:41:45:d3:34:7f:f6:23:3f:c7:33:7f:f1:61:
                    47:2d:6a:da:3a:5d:0c:09:4a:9e:82:9b:0a:3e:8e:
                    d8:1a:aa:e2:51:c4:b3:64:8a:48:a7:f1:b8:2c:64:
                    c4:36:eb:5b:23:cf:ab:e4:66:86:12:8a:03:e7:de:
                    0f:1b:17:89:33:b4:4c:18:47:30:b3:3a:36:f1:48:
                    3c:9d:d2:47:18:5b:f5:51:15:18:ce:c1:34:16:0d:
                    54:e9:a5:ff:e2:d1:8a:3e:c5:b2:75:73:04:c5:f9:
                    22:f2:ba:29:a4:b9:1e:2e:b8:82:d5:30:d9:98:14:
                    d5:f0:24:92:d2:ee:a8:73:66:5c:fe:0e:18:55:25:
                    92:d3:7c:48:18:7e:c5:4d:46:fc:b9:22:28:ff:35:
                    9f:9f:b5:d6:85:c3:ec:1b:3b:8b:70:0f:15:ca:f3:
                    e1:d0:81:03:11:93:09:2f:ff:67:73:98:9b:92:b2:
                    ea:f1:cc:e1:f2:54:9b:a5:d6:21:c7:95:60:62:8b:
                    6d:5f:ff:d1:45:6b:c2:35:5e:8b:80:e0:44:80:a0:
                    06:04:c4:c9:c3:ad:a3:9c:5b:a3:90:7e:7b:5f:09:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BF:1B:23:9B:90:70:5B:E5:0F:D4:8E:3F:B3:3A:B5:03:63:11:73
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:63:69:7d:49:00:5a:67:5e:a9:a4:c4:1a:99:3d:cd:51:
         bd:f0:ad:22:94:b4:df:66:26:cf:59:8e:bf:3c:71:ee:da:72:
         31:58:3e:89:62:db:a6:21:95:72:bd:da:ba:25:24:db:86:2c:
         77:0f:e7:9c:60:22:cf:19:11:c2:24:8f:79:09:3b:a5:0f:df:
         64:c5:59:0c:e6:de:fd:7b:10:f5:09:be:19:e0:53:75:8b:55:
         60:ca:b4:f3:51:3b:8e:1e:aa:51:26:5e:c1:11:9d:d5:62:c9:
         e2:4d:61:c7:25:05:a8:07:6c:c2:60:12:ab:f5:30:a0:31:96:
         f9:bb:4c:be:02:5e:ff:7f:a8:e0:a0:8d:df:c2:7f:59:6c:00:
         0f:48:b1:9a:d8:15:76:b1:14:4e:67:ba:27:9f:73:4b:70:87:
         ee:24:c7:49:38:03:0c:09:50:c9:3b:5d:72:60:2e:09:06:b3:
         b8:04:bb:cb:d1:ee:b5:44:62:2c:76:54:8f:d4:b4:fc:d5:ff:
         34:98:c0:f7:3b:44:48:c7:61:3a:2d:4f:67:34:06:0e:a7:68:
         d7:20:e6:93:74:54:4e:36:f5:ff:7b:b9:b5:01:60:e3:0b:c7:
         c2:c6:ea:b4:d0:b7:6a:5f:ff:d7:df:8f:4f:89:8c:b5:69:20:
         57:a3:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----