Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File:                     5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier:          fG8QOeJpl022W9bzWJCyKnRS6Rm3lj8qtQUu+yilWBE=
Subject key identifier:   52:9F:B6:35:89:E5:16:7C:BA:AF:4A:E7:92:2B:E8:F5:7B:D0:15:A4
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer:       /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial:       01962ECF963815E6C986C13278163D541263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number:          13D1
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: GOcoLUDF8E8mDXIva3UiGo375CpNZw0ysqcwL3SdaxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:96:38:15:e6:c9:86:c1:32:78:16:3d:54:12:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=529fb63589e5167cbaaf4ae7922be8f57bd015a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:ef:3f:74:9e:55:a4:c6:d4:88:cd:83:d6:
                    8e:3b:4d:47:c7:9b:56:da:dc:d6:2a:8b:49:0b:c3:
                    95:d4:13:7b:89:bf:94:40:ea:53:69:14:47:65:60:
                    f7:e4:90:8c:1b:08:eb:fd:cb:4c:62:e0:ad:e3:01:
                    89:5f:e7:9e:67:44:65:60:d4:f7:c7:26:56:7c:6e:
                    b6:ce:ca:46:74:96:48:a6:27:ea:99:53:cf:8f:59:
                    ac:1d:cb:97:67:18:6f:28:56:8e:8e:0d:93:fc:b1:
                    20:82:ce:72:c6:24:19:78:c8:89:f9:48:84:11:ec:
                    9e:84:ba:d3:4a:1a:25:90:61:73:ac:83:84:9f:08:
                    13:8b:f9:df:8e:1c:08:bc:a0:77:bf:29:c2:00:69:
                    fe:8e:07:30:d9:32:09:a4:d1:8e:18:a9:3c:99:10:
                    da:10:e1:2c:eb:0f:b3:66:cb:f3:8a:33:a9:23:02:
                    1e:73:0b:a5:13:b5:54:85:c0:5f:8a:e6:87:49:d4:
                    19:48:3a:0a:fe:39:31:ca:78:a2:ad:3e:c9:f1:10:
                    23:d2:22:97:6d:95:33:e4:33:b5:bf:ea:9d:bf:8d:
                    63:b7:46:3c:51:a2:5b:74:52:fb:fa:a4:fa:37:07:
                    e2:db:57:25:39:c4:a5:3b:33:f6:3f:78:b8:d7:34:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9F:B6:35:89:E5:16:7C:BA:AF:4A:E7:92:2B:E8:F5:7B:D0:15:A4
            X509v3 Authority Key Identifier:
                keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:50:86:d3:ed:d5:26:93:1f:c0:d8:87:86:21:7f:3d:fa:0c:
         fc:c3:5f:ee:c1:06:eb:a9:ff:73:55:92:a7:64:a3:c1:c5:b4:
         5a:c6:1c:bb:2b:e6:aa:b6:12:a4:8c:46:c4:42:cc:2d:2c:a7:
         ee:e0:78:1e:6c:dd:32:9d:b9:c9:53:01:c4:39:96:7f:5c:6b:
         b9:89:8b:39:2d:d1:bb:4d:f6:9e:29:29:e5:96:f1:21:17:8a:
         41:83:cb:a8:94:cf:c7:32:9e:81:b1:88:69:fd:0c:65:94:10:
         76:05:d3:84:35:63:64:aa:3d:3f:c3:16:9c:ae:4f:26:96:ee:
         7f:31:5d:ae:bc:75:a8:e4:56:6c:ba:f7:43:65:5a:12:93:fa:
         67:b5:14:2e:c2:5f:01:da:b7:03:13:c5:63:e0:6c:7c:19:d9:
         8d:fc:67:47:1c:a5:0a:be:9a:64:62:d7:7e:8a:30:18:5e:02:
         6b:b4:6f:d0:0e:1f:47:c8:0a:ca:c2:01:e7:82:c3:ce:8e:db:
         1e:43:11:83:31:4d:eb:61:b1:5b:62:eb:a6:01:41:6e:f2:ba:
         c5:ec:93:0f:74:50:93:ff:79:75:5d:10:b8:69:cc:8f:68:d6:
         cf:01:52:75:cd:05:ae:9c:5a:13:c0:2e:35:9f:18:b1:14:d0:
         1d:55:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----