Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          a7n52ZpelQU1mVFhdPPbOgjo5trcZe1sWfzEHM3ksAk=
Subject key identifier:   05:78:C7:3A:F7:8A:DA:DC:98:B0:A5:13:4B:F0:51:75:C7:35:4C:B1
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       01962FAB516A6AA78DD47B3F2ADB2FF8AC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          118B
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: 2sfbpTFq0DQ2ocw7VVE3LVSDIlg.roa (hash: bGHxMUrGetZJKedW/fXRi55NBwExBw0dc8Dq21HOgOY=)
                          2: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: i5mL9/E0Fg2WokuL7oWaNTxBTLzigQwENil9T0faFts=)
                          3: F8PtMRv-e6nREGszq9sbkJV_Kts.roa (hash: +n0+96obQJHfnpZ5fXZoRpPeMFlicL38jLddAnTRZlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:51:6a:6a:a7:8d:d4:7b:3f:2a:db:2f:f8:ac:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=0578c73af78adadc98b0a5134bf05175c7354cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:10:f5:4a:28:62:35:2b:18:52:fa:63:9e:
                    98:18:91:1e:96:b2:d5:1b:60:01:fa:c1:32:a3:1e:
                    db:58:6c:ee:32:db:f6:a6:a1:d2:21:fb:e4:f0:e6:
                    ad:ef:dd:5f:f1:94:44:ed:88:d8:b3:1f:fe:6f:5c:
                    62:2d:2c:47:95:58:0f:df:ca:93:c0:20:84:36:26:
                    7b:b7:3c:bf:97:10:9a:43:e4:4d:13:5e:66:87:f1:
                    7f:be:cb:65:50:ee:5f:5b:3e:5f:2d:7e:01:ed:1b:
                    fa:ab:3b:52:cd:5e:b3:61:91:ac:b3:29:fd:21:fe:
                    7b:1d:c4:c2:df:00:c0:d2:e2:29:df:14:35:eb:9c:
                    3d:7f:d8:75:c0:e5:2c:e4:09:0f:44:67:19:9f:d8:
                    38:4d:d5:dd:5f:cd:5c:a5:cd:be:c4:64:a6:37:64:
                    3f:46:2c:e6:b0:eb:da:f2:c2:90:39:3d:02:84:09:
                    a0:7c:c4:12:8f:1a:50:09:2e:5f:ba:f2:a4:56:87:
                    6f:7c:5c:67:c9:ae:76:b9:0e:1b:a3:34:91:eb:23:
                    51:35:0b:fd:5d:e3:dd:93:10:86:b5:cd:45:13:1b:
                    3b:73:c4:29:12:04:6b:a8:14:7d:af:40:8e:c7:e9:
                    2c:51:ce:95:71:87:f2:f4:b4:c3:17:21:b2:aa:9b:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:78:C7:3A:F7:8A:DA:DC:98:B0:A5:13:4B:F0:51:75:C7:35:4C:B1
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:cd:ef:ae:9f:04:8e:3a:a7:17:80:32:08:1f:85:8f:0b:
         79:6f:00:2a:53:2c:c3:bf:65:ca:c5:a0:08:7b:94:5d:7a:93:
         95:16:bd:39:2c:66:7f:ad:b6:eb:6c:50:82:c8:71:1c:ae:4e:
         8d:8c:73:20:f5:82:63:c8:6e:21:93:65:a1:f0:5d:b3:88:68:
         3f:1d:61:db:cf:c7:e7:98:78:d3:77:a6:a0:82:49:50:69:38:
         00:04:08:16:27:a4:be:00:7c:26:51:46:6a:14:b6:96:06:2f:
         bc:4e:a5:7b:f8:c6:d3:9f:6f:6c:63:9a:c5:30:a4:fc:d2:31:
         ca:b1:ef:1a:25:1c:b9:cb:72:e6:06:3b:20:94:9f:e6:ba:fa:
         e8:d2:84:41:50:04:06:b2:2a:08:5a:91:c1:8b:cd:62:c0:25:
         81:13:bb:78:f0:a3:23:8f:89:70:64:75:71:15:2f:2d:3d:56:
         2f:3e:77:10:82:d9:08:3b:2d:25:c7:68:dc:a7:57:0a:e6:64:
         cc:24:b3:28:62:bd:69:e1:ad:0c:f7:f6:df:45:1b:3a:24:64:
         4f:d4:04:96:bc:7a:d9:11:83:a1:2d:f3:db:88:cd:4d:22:8f:
         a7:5b:64:de:a7:27:88:7e:f8:12:05:25:e1:1b:64:39:33:71:
         13:1a:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----