Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File:                     V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier:          IBfO1Z5Rt1l8/BW7m1iOuuKG7oWSHFDWnhnr4uTaf3Y=
Subject key identifier:   BB:B4:2D:67:78:AA:BC:51:42:02:1A:1A:E3:3A:91:7C:39:47:57:E7
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer:       /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial:       01962E989BDD3F6C0099BFB9B8043AA85C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number:          1404
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (hash: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=)
                          2: 64bniClUPfUDALDLv0vwIlVjfMA.roa (hash: lL8XeUncI5mQZtyJg5Qencz5SVSK52g5YBySwrx2+kI=)
                          3: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: VPlco1XMCYO7CndwdeQnqq6drPzjziZdQpBU6xeqx5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9b:dd:3f:6c:00:99:bf:b9:b8:04:3a:a8:5c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=bbb42d6778aabc5142021a1ae33a917c394757e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:80:a7:1a:5d:6a:20:6c:e9:fb:df:7a:a8:
                    b4:fd:44:ed:08:6f:0d:17:e0:4c:9a:1e:8a:b7:c9:
                    ee:8f:ea:cf:5d:26:66:84:ef:e0:c0:7a:92:65:3e:
                    a9:86:47:e9:51:a8:d6:bb:dc:97:63:86:f9:bc:49:
                    6c:e1:c7:8e:8f:b8:9e:38:10:d5:c7:36:49:19:7b:
                    e1:f9:d2:56:b5:f7:08:a3:1a:c6:58:8c:7f:bd:9c:
                    9b:8c:8e:46:65:d9:6c:e4:1d:cc:f8:0c:bd:21:dc:
                    c3:2f:dd:79:45:88:97:5d:a6:47:00:61:de:d3:44:
                    f7:92:0e:23:e3:05:41:2d:8d:70:5c:ef:4b:e3:62:
                    c2:16:30:7c:4e:3b:77:79:f9:05:41:b7:cc:83:17:
                    08:fb:aa:8f:eb:c2:06:12:de:3c:47:cb:cc:62:31:
                    33:4d:0c:0b:8c:1d:5f:43:aa:3c:1e:bb:7d:d4:24:
                    7b:f3:2b:43:7f:f8:af:a8:de:63:9b:a0:88:b0:40:
                    00:43:48:a7:e1:21:04:33:39:9a:4b:1b:92:74:5d:
                    6d:48:66:1a:ad:82:45:04:3b:d0:bc:42:23:c5:b6:
                    02:80:97:1b:02:c4:a6:b6:98:c8:18:53:93:a1:b7:
                    d8:3f:65:a3:c3:b8:56:2b:11:0d:ac:73:69:a5:89:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:2D:67:78:AA:BC:51:42:02:1A:1A:E3:3A:91:7C:39:47:57:E7
            X509v3 Authority Key Identifier:
                keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:aa:cc:81:f7:0c:bc:be:16:f9:9d:27:1d:df:db:cd:e6:97:
         b2:0d:38:17:d6:68:b1:95:ae:4a:44:d7:5a:b1:c7:29:1f:f2:
         74:ba:3e:84:2d:53:f2:14:83:0d:f1:eb:77:48:c6:6d:03:42:
         1f:ec:be:1c:80:0a:b4:ef:24:17:6e:0b:51:91:34:54:5f:33:
         fd:e4:aa:ab:bb:b6:32:e6:81:46:48:cd:bf:68:5e:3d:e0:cb:
         44:14:ec:d2:d8:70:c5:a0:ef:2b:a1:41:87:28:15:a3:f9:44:
         1e:98:b9:4e:f6:9c:bf:37:09:8c:85:ca:b9:83:65:b7:df:a8:
         49:67:f1:50:78:f1:75:b3:c9:ba:c9:71:e7:b8:a9:62:0b:e8:
         a0:01:73:6d:ba:50:e0:3b:80:e1:28:ca:8a:0d:29:d7:53:22:
         30:0a:16:ce:a7:45:11:37:3b:f8:75:f0:c5:77:76:c7:26:41:
         55:4f:fb:bb:bb:3c:e2:13:c2:30:f5:03:bb:2e:07:bc:21:f1:
         1e:57:d6:7c:b5:5e:05:0e:e1:06:da:fa:40:0a:1d:3e:47:18:
         32:25:82:8d:37:75:5a:a9:23:b9:4a:70:c1:a8:fa:bd:0b:4a:
         b2:a2:cd:03:72:63:0b:1b:7b:86:c7:21:c8:54:a3:e1:c4:84:
         8e:ff:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----