Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File:                     1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier:          Zr7O7cw41lFdFWox6pgm1kKBus+lnTvQAWbw7bsLx7w=
Subject key identifier:   97:FD:6D:6C:60:9B:8B:F4:A5:E4:9D:F1:96:4F:3E:CB:BC:75:50:A2
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer:       /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial:       01962DF3A73A17EF7A7CBF828E8F55C26DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number:          135B
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
                          2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: Qq7IeMnYXg2OkI+0QK/UZ2cj9a33ioGXa5XiWygZ8dc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:3a:17:ef:7a:7c:bf:82:8e:8f:55:c2:6d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=97fd6d6c609b8bf4a5e49df1964f3ecbbc7550a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:05:12:49:80:c8:fc:05:63:15:47:c5:14:
                    92:c0:04:fe:fe:5e:e4:a2:61:e5:8e:4a:c5:57:7f:
                    51:74:92:99:7d:29:34:00:b0:7f:d9:87:75:e6:3d:
                    4c:58:3c:a2:18:7c:2e:17:87:21:55:c0:15:1e:ac:
                    eb:f4:2a:2d:ab:48:3a:2f:9b:a4:d4:d9:8d:83:94:
                    20:14:16:6b:ae:0a:fd:5d:1e:8c:e6:8d:d4:9b:c8:
                    84:07:78:4a:a4:12:a2:08:17:63:02:2f:c0:91:9f:
                    20:c3:4a:9d:14:9b:a8:e9:72:67:64:be:c0:3c:ec:
                    b0:24:86:cb:b7:4e:7a:f3:70:60:4e:e4:52:32:37:
                    61:d8:21:95:df:56:bf:11:5f:08:2d:ab:04:b5:71:
                    1b:0a:13:77:12:dc:1c:c8:32:ae:d2:c3:ca:29:dc:
                    2c:63:f5:56:ad:6a:0f:6d:b0:66:61:6a:15:89:09:
                    65:8a:e6:38:d3:f7:6f:6c:d3:17:36:b5:72:38:20:
                    78:19:43:9c:9b:a4:d1:fb:ff:11:88:5d:dc:22:26:
                    d2:b4:bd:b1:15:a4:e7:3b:4b:07:20:99:72:5d:2e:
                    de:6c:64:83:dc:ea:b4:d8:e8:24:91:72:d1:80:c3:
                    d7:83:42:19:b0:06:bc:bc:79:bb:e7:b9:0c:31:a9:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:6D:6C:60:9B:8B:F4:A5:E4:9D:F1:96:4F:3E:CB:BC:75:50:A2
            X509v3 Authority Key Identifier:
                keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:05:67:d5:30:5a:f5:06:0f:bc:ef:6d:56:db:f3:4a:ed:8a:
         5c:bf:9e:9a:b8:75:77:ab:16:29:33:47:ec:e2:ee:cb:5d:aa:
         2f:3d:56:24:ad:f0:ed:3c:ae:92:d1:2e:d8:24:7b:25:02:1d:
         98:2c:f3:7a:21:14:2a:d4:44:5a:8d:0d:5b:d0:05:f0:f6:74:
         87:38:59:db:0f:62:2f:27:c4:07:ba:16:c5:f2:cb:be:8a:6f:
         fd:30:ba:27:ba:72:93:2c:c8:ba:c9:fa:aa:c7:3f:db:cc:16:
         5b:19:a3:19:72:f4:65:34:06:83:65:21:24:ab:b1:cd:46:c7:
         92:80:81:2a:d2:81:f5:cb:f1:33:df:10:48:ae:b1:e9:7f:c8:
         37:ba:04:44:b2:ac:b4:49:f2:69:79:5c:2b:4c:87:3b:b6:94:
         30:ff:91:c4:2e:3c:69:a0:52:da:44:89:61:a4:4c:c3:df:3c:
         d2:b3:57:16:e6:2e:54:c8:37:39:91:4d:d6:b2:9a:90:64:1f:
         81:ee:a7:34:a9:89:5a:53:61:06:5f:f2:dd:d3:be:e9:d1:66:
         2d:c2:3b:cb:20:35:7a:3c:79:32:a3:6d:70:b0:f3:0c:1a:09:
         7b:37:30:54:f2:c7:97:2a:2a:96:2e:68:18:b6:52:4b:2d:c7:
         c2:8a:b6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----