Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
File:                     5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json)
Hash identifier:          ZRgGXVe7Qv3JDkIBGR4XvypfXzczVO12l7/eLtmEPvE=
Subject key identifier:   4A:7C:41:2C:C6:FC:24:85:07:71:E5:18:9B:8F:AC:1D:BF:B0:AE:7A
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Certificate issuer:       /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial:       01962F06DC9C311985CAFF6C92D5DED234BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
Manifest number:          09EA
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=)
                          2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=)
                          3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: nhkm8FBJhRAhuTHOTUmUlJKns3FJzaSSOFWU8nL1dOo=)
                          4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=)
                          5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=)
                          6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=)
                          7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=)
                          8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=)
                          9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=)
                          10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=)
                          11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=)
                          12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=)
                          13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=)
                          14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:9c:31:19:85:ca:ff:6c:92:d5:de:d2:34:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=4a7c412cc6fc24850771e5189b8fac1dbfb0ae7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:71:14:8b:0c:aa:60:3b:ee:39:6e:69:5e:
                    b2:f1:11:91:dd:32:59:49:70:8b:2f:aa:74:8a:40:
                    09:79:4f:f2:9a:17:55:8a:fb:b7:1d:b1:67:39:b4:
                    38:4c:32:cd:e0:0c:d0:b8:32:07:c0:6a:6c:44:d8:
                    09:cc:a4:3e:cf:f6:a2:28:e5:f6:18:74:ca:50:c5:
                    93:e0:0f:bb:73:72:71:42:9d:11:df:22:68:e3:97:
                    69:f8:a4:62:cf:b1:2f:5c:a8:28:d2:96:d1:12:2c:
                    3b:5d:84:62:ff:7f:77:81:5a:fb:ca:62:27:3e:e2:
                    97:71:d5:45:c8:ef:63:a7:e1:bf:e3:f3:07:d4:28:
                    6a:78:2e:9c:33:5a:5e:d4:20:27:37:8f:b5:4a:48:
                    04:07:7e:01:2d:ed:73:ac:3a:21:d3:34:ea:05:8f:
                    82:e8:e7:08:3b:a5:d9:31:25:42:41:91:7c:c5:c6:
                    44:09:ee:74:07:ae:7d:00:cb:6c:73:19:94:38:e1:
                    9f:7a:c9:87:43:d5:c7:77:4a:e7:53:70:ea:91:86:
                    36:42:25:c1:1f:61:57:51:14:68:3a:98:7b:5c:37:
                    6b:45:bd:0c:3a:54:8c:f1:ba:23:b7:7f:68:fc:71:
                    c0:44:b5:34:6f:e3:d4:f2:55:6e:9f:e5:40:1a:19:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7C:41:2C:C6:FC:24:85:07:71:E5:18:9B:8F:AC:1D:BF:B0:AE:7A
            X509v3 Authority Key Identifier:
                keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:f6:f2:22:a7:84:83:a9:45:47:68:89:80:8c:e2:41:e1:
         b3:3b:a0:8d:36:ba:a8:b0:a2:b4:13:8b:3a:20:e0:88:c6:82:
         8f:9a:68:5a:73:4a:f0:b0:78:5a:db:e0:3b:f6:80:aa:e4:2e:
         ea:7c:92:72:81:ac:0d:6f:6b:ac:07:a2:16:d2:fe:6a:7e:42:
         ab:ea:be:6d:4a:65:83:b6:6c:2f:20:d8:79:cc:c7:15:83:b9:
         b6:52:d8:0c:18:0e:c0:bd:6b:b3:e5:97:d8:05:35:a8:59:9d:
         1d:35:92:1a:e6:a0:c3:6d:85:53:b3:fc:01:d9:b5:92:5f:45:
         3b:d7:34:75:25:4f:19:1c:53:80:6a:57:4c:e5:c3:1a:c6:2c:
         5f:37:51:bd:d0:44:92:d9:f3:1c:60:d5:5a:5b:60:30:5a:90:
         06:3f:62:79:88:60:32:4c:2e:24:de:71:fa:78:54:b3:29:67:
         c4:96:11:73:0f:50:c8:e8:c0:14:ab:f7:d2:6f:49:78:b9:f3:
         c7:bf:fd:ab:41:c2:00:c0:a8:81:cd:fb:57:17:a7:1c:3f:b0:
         a6:32:6b:ef:d0:2a:bc:36:b6:87:56:87:2e:08:2a:f5:e7:0a:
         08:ba:93:09:49:59:c6:6b:de:64:74:5c:32:c8:b3:14:75:5e:
         f2:87:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----