Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          na19V8m5Qckt3P/HPYtjjNQLjbbAmweaYojzFRo/ye8=
Subject key identifier:   26:0E:3F:23:DA:07:2D:43:2F:95:99:AB:FE:B5:D6:BD:6B:EA:0B:12
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       01962F3DA29BB91A6862060063FADB9CC805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          0B2C
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: 1prmur5Q0WeASCPO8c552A3bVPyaQB/z3Oz9g1THWKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:9b:b9:1a:68:62:06:00:63:fa:db:9c:c8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=260e3f23da072d432f9599abfeb5d6bd6bea0b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:ef:bd:1a:fe:f7:e8:3b:2a:2f:ed:4f:a0:
                    d1:45:26:ac:e7:55:74:01:68:27:aa:52:69:22:59:
                    03:fb:95:bd:e1:40:9c:37:82:7d:b9:06:17:0d:61:
                    56:be:e3:43:ed:cf:b8:a3:8e:91:47:36:72:09:40:
                    2a:b3:85:03:b4:43:e8:0a:04:17:5c:1e:89:60:1e:
                    32:da:85:14:92:4e:5a:1d:51:fa:85:ac:12:bc:c9:
                    65:53:59:b9:31:c7:98:07:67:b1:bc:3b:9b:05:8a:
                    a3:0b:e0:27:32:db:21:40:7a:5c:09:89:53:79:7e:
                    71:9d:2b:fa:3b:1d:18:7c:18:cb:e9:50:ba:69:5b:
                    16:80:9d:05:be:d3:4b:f0:6c:d5:c2:ed:53:e7:e2:
                    08:15:ec:e4:c6:89:9c:c9:04:a5:97:04:71:ac:dc:
                    41:f3:38:86:05:b8:c9:c4:45:b4:55:15:be:f6:ba:
                    8c:77:68:27:7e:a7:ec:f4:56:89:16:68:19:ee:37:
                    99:8a:bd:f3:d0:ac:06:82:0c:82:57:8b:54:23:b6:
                    6d:1c:d1:9e:98:29:c3:4b:fa:7f:83:df:1a:59:84:
                    e6:f1:bc:c7:67:89:cb:88:d2:05:d7:68:e8:54:66:
                    5c:4d:2d:6b:bf:70:24:77:8c:bc:81:72:03:2f:af:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0E:3F:23:DA:07:2D:43:2F:95:99:AB:FE:B5:D6:BD:6B:EA:0B:12
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:51:76:10:1e:50:08:8f:5a:39:95:f4:3c:25:14:5f:5a:
         c3:95:03:ed:e4:7a:46:6c:0e:6c:27:2e:ac:8e:25:2a:f8:d1:
         74:ab:43:b2:11:1d:dd:42:15:7f:d9:18:de:29:8c:4f:0f:91:
         fd:9f:95:32:40:c0:7d:b6:4c:5d:ff:9f:5d:4c:dc:d1:08:5c:
         ac:4d:3c:69:da:b0:85:cd:5d:c7:54:e3:42:a3:24:2c:5a:29:
         35:fc:25:ee:26:f1:eb:ad:43:95:d8:83:d4:9e:fc:28:26:22:
         cd:e2:35:63:bb:78:b4:3b:e4:c7:0a:2d:0d:e4:6c:28:d0:05:
         de:46:6f:7e:1b:5e:dc:9a:d4:99:da:0c:72:62:ac:49:41:98:
         73:c8:91:d6:55:ea:17:bd:1c:98:62:e7:c3:de:be:6f:37:e2:
         5a:64:83:b3:b4:dc:c5:b9:92:a1:e6:b8:b1:09:f5:ca:14:4b:
         f1:7d:b5:b3:ee:62:38:53:d4:79:25:9b:38:3e:fd:6b:a8:12:
         09:83:d1:3d:21:59:cc:ab:f1:f4:99:14:40:dd:7c:4a:4c:01:
         7e:58:d1:d2:85:d0:5e:f5:be:38:6e:38:5a:93:de:c2:9e:ad:
         7e:f2:b1:b6:1f:58:9e:e3:9f:a4:fe:b6:44:63:61:f4:27:4d:
         ed:65:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----