Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File:                     tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier:          /q+j6jJA9xNlAuELm1GHmqARlHF8eKL871IzBr269ZY=
Subject key identifier:   5E:5A:FD:45:2E:95:DC:E5:A1:C8:6E:FA:F3:B4:D6:D4:EA:BC:CF:B3
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       01962DF433B8E20FF575E892DC59305F6387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number:          0FE5
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: IJYVnMypsONOp3wPa7p4ZWcA1MwvQWn1Nti5uXgBEnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:33:b8:e2:0f:f5:75:e8:92:dc:59:30:5f:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=5e5afd452e95dce5a1c86efaf3b4d6d4eabccfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:ff:5a:b7:c7:a1:51:b7:c0:d5:12:26:e8:
                    b6:56:4c:89:2e:90:87:f0:75:90:e3:e9:37:4a:6d:
                    9f:37:09:4a:3e:7e:f1:30:57:32:1e:67:be:ba:87:
                    f9:43:f4:3a:d9:2f:c1:f9:11:ef:18:ce:2a:e8:2d:
                    e3:0f:0d:ff:3e:79:23:50:58:d4:73:74:b4:bb:f1:
                    c9:07:a3:72:d5:51:86:a5:7a:ee:ff:77:39:ef:5d:
                    67:df:db:a6:b2:42:cf:c9:67:4c:fa:c3:28:dd:89:
                    d0:7e:ac:09:7c:49:d0:2c:c5:80:d0:96:60:57:f9:
                    aa:f1:1f:5a:c5:e1:92:24:ab:33:22:5f:42:f5:2e:
                    a8:09:0d:e8:01:81:a8:95:01:03:0d:ea:96:36:8b:
                    d8:e4:79:24:5a:33:11:c2:2e:99:04:1b:ec:5a:43:
                    6c:60:94:0c:8a:3a:3e:47:fc:fd:07:a1:04:52:01:
                    51:a7:71:af:de:82:ab:8d:9b:eb:bb:ee:77:9d:58:
                    62:75:ee:6b:2a:ad:f4:c0:d3:15:c0:72:b5:4b:b5:
                    d4:b4:08:8f:c0:79:d2:c5:25:66:8f:af:7d:06:f1:
                    a7:1d:29:1b:f2:9c:91:be:e0:ae:48:41:ee:17:32:
                    7e:b1:74:b0:7d:99:6a:90:96:ad:01:12:01:80:43:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5A:FD:45:2E:95:DC:E5:A1:C8:6E:FA:F3:B4:D6:D4:EA:BC:CF:B3
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:53:23:0a:0b:f4:3d:b8:76:9d:55:43:84:05:bd:38:02:
         b2:5b:99:ff:ca:62:77:25:b0:50:bf:e3:c2:19:e2:76:00:ed:
         a0:f9:33:9b:b4:a0:9d:9d:36:eb:bd:5c:dc:54:a5:f5:12:81:
         d6:54:64:bb:78:80:b9:d4:be:d2:12:7d:14:54:a7:46:32:b3:
         9c:94:1b:c1:38:1a:db:8b:5f:7a:76:0c:66:e1:f5:99:78:41:
         1a:78:c9:53:85:b1:df:de:af:ef:99:14:00:9c:3d:9b:e8:fa:
         e3:16:bf:3e:22:20:a6:54:0e:3a:e1:08:ad:e5:aa:19:54:95:
         fb:96:c6:69:93:18:74:f1:b2:63:31:b2:06:a6:b1:f5:25:81:
         d2:2a:e0:c1:78:48:58:08:77:94:bd:63:d6:1c:53:87:b0:ba:
         ef:a6:3a:a8:88:76:4a:b6:53:90:52:b9:92:cb:f9:e4:6d:84:
         47:4d:d5:d0:cf:b8:54:0c:27:bd:e6:00:ed:48:ad:02:e4:6d:
         32:4f:94:89:6e:10:e9:ef:e4:a7:c5:c2:63:16:36:1f:d8:19:
         1b:7f:6c:eb:66:08:ab:8d:2d:8a:8f:6a:6f:14:49:9a:2a:06:
         a8:59:30:9c:a0:26:ee:45:7c:71:78:2c:8e:29:cb:d4:97:61:
         9e:4e:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----