Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File:                     5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier:          j7+EpT4ljjrjk64g0ljRKG8sqA9rK9nAm8+uNTJR5GM=
Subject key identifier:   A0:D3:AD:87:71:1E:F2:84:84:A8:BB:9B:16:6F:7D:16:67:20:ED:92
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       01962F3D62F28A88101ABFA1921AB6D6259B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number:          0BA9
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: X+oNSpJ1KI1OP6XlnNuzG20k3j3bDjNzplf3VzLq9Ao=)
                          2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:62:f2:8a:88:10:1a:bf:a1:92:1a:b6:d6:25:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=a0d3ad87711ef28484a8bb9b166f7d166720ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:51:02:e2:c4:dc:a3:89:10:7d:60:17:07:
                    d2:cc:8e:2f:ad:bd:b9:20:77:0a:dd:a4:eb:1d:2e:
                    b9:af:25:28:1f:74:78:e4:84:12:a4:76:5d:0d:85:
                    57:75:89:03:f6:45:6e:ff:45:ba:13:1a:81:07:24:
                    b1:cb:e1:ae:8d:c7:5d:a9:7d:d0:8f:c3:30:8c:4e:
                    74:a9:f6:b1:47:9b:24:55:bb:93:0b:7c:65:4d:e9:
                    68:ed:87:33:ba:89:39:69:30:a2:42:e8:96:f8:e6:
                    6b:f9:30:e3:69:6c:f5:f0:d8:cf:eb:66:8a:12:a4:
                    8a:53:24:9a:e1:81:dc:29:ea:07:5f:3e:af:a6:d7:
                    58:f3:10:9c:eb:4d:18:78:e8:f0:29:7b:f0:d0:28:
                    47:7f:10:dc:89:f9:0e:38:52:ec:95:40:4c:61:99:
                    65:a9:80:67:aa:04:3f:83:c3:dd:16:57:7b:d8:a5:
                    2a:2c:02:23:41:e6:8f:cb:57:a1:60:78:db:26:7f:
                    75:40:ad:66:69:91:c6:b1:72:af:3b:24:e7:54:f4:
                    07:b5:61:37:9b:59:6b:92:b3:b9:e5:a0:35:52:7d:
                    a0:8f:84:44:1b:64:04:e6:93:56:a6:02:da:da:a7:
                    29:6e:96:9b:18:80:ba:76:11:27:51:af:bc:d8:bf:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:AD:87:71:1E:F2:84:84:A8:BB:9B:16:6F:7D:16:67:20:ED:92
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:3f:4c:25:92:6b:85:c3:6d:5b:9b:49:c9:fd:61:07:89:
         35:94:91:db:ca:d0:56:50:86:13:8d:b1:d2:46:49:30:92:b3:
         74:f2:4d:fe:27:e6:9f:c9:05:ca:77:94:c1:8f:a5:8f:64:4e:
         e7:e3:5a:b3:ab:1d:1e:58:1b:df:c6:9b:e6:be:e3:4e:c0:5b:
         a5:62:2d:1f:9a:61:89:d9:0e:ba:6f:20:a6:12:94:b3:ba:69:
         c4:2e:8b:93:20:70:4c:9d:d4:15:ee:f3:98:fd:87:28:80:ce:
         b2:c8:c3:26:12:d8:e5:79:20:5a:8b:74:f1:12:0d:74:f8:78:
         0a:4c:37:bc:69:5f:21:c0:10:77:9c:7b:ce:79:3f:11:c3:5f:
         ec:5a:a7:3a:a2:e3:44:d3:d7:97:c2:74:df:d1:c4:d3:e9:57:
         84:2c:1f:21:bf:0f:14:40:94:c3:3b:47:d9:7e:e1:b2:75:60:
         4d:2c:44:88:c0:0d:ae:43:3c:ad:bd:b9:40:98:c1:ce:f7:85:
         81:b7:45:d1:ef:66:b6:f8:bd:2e:63:cc:df:1b:62:08:3b:30:
         3e:34:b7:d3:87:65:ad:54:4f:44:b9:0c:d2:50:46:63:a0:85:
         f2:59:1e:d8:b3:12:66:24:75:81:b5:b6:a8:b1:5b:c9:bd:dc:
         d9:76:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----