Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          IssdNhjXcET7VdxhoJo4a1w63Fq6imAko1GmwEbAmnE=
Subject key identifier:   6F:77:E0:F2:A8:7A:04:C3:DE:01:F0:8D:3D:12:86:97:1A:8E:41:E9
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01962F0743C07F2744C7AFBFDB4917B0E9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          0FC3
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: o1J+nGGDZmVM3qo8wH3KzWqqI/wcyMpYyA7TI3aFCr4=)
                          2: JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa (hash: Ec0jL54VOo6Fz7NL+ebq98FwJ+8rbJVUpRDjInpAUJI=)
                          3: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=)
                          4: fz3EIWejODwg_Gt1mdA_zDaL-c4.roa (hash: DZaf7P3jYMM7f57AG0PkEh5YpUu9nWfWyi+om3unA/8=)
                          5: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=)
                          6: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=)
                          7: ypuXUHnwj0Si2wTZIoD6wakrPpE.roa (hash: Q3wl4UsBeSP4TzzPez8jeK8xoNzd5ChOWI4pNHLd3Ng=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:c0:7f:27:44:c7:af:bf:db:49:17:b0:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=6f77e0f2a87a04c3de01f08d3d1286971a8e41e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:a1:f3:73:78:cc:8b:e8:b4:c4:ee:3b:f8:
                    4c:ea:eb:a7:dd:f6:58:5f:1f:58:29:30:29:16:06:
                    4f:41:ff:e7:75:7a:1b:72:00:e2:ac:ab:ac:bc:f0:
                    f9:fc:b6:d3:0f:17:04:dc:00:63:b8:51:e6:8e:74:
                    8b:4c:fa:ab:05:97:57:c1:d8:0b:1c:aa:db:dd:0e:
                    a4:7d:4a:bc:b2:00:cc:9f:45:78:5d:3a:1c:92:42:
                    55:b0:bc:e0:52:b0:05:8b:69:66:2a:2d:88:90:4f:
                    78:43:ad:ef:66:42:96:bf:7f:d8:44:5f:5c:07:ba:
                    eb:59:8f:9a:af:23:87:8a:9b:d3:f0:4b:50:fe:0f:
                    07:50:09:42:d0:54:d1:ca:f6:1e:a5:ab:45:5d:dc:
                    cd:f2:a0:2e:75:ce:ce:86:00:14:64:82:c4:e4:4d:
                    52:a9:04:4c:f9:b7:4f:28:19:2c:0f:28:02:31:07:
                    1a:a0:e8:b4:75:ca:f2:9a:eb:c1:69:f6:38:a8:eb:
                    75:c0:cf:11:19:40:22:f1:af:6c:c0:0e:44:0b:36:
                    9a:b9:8f:b7:82:d0:13:d9:80:ac:87:b0:27:17:9c:
                    98:2d:9e:fd:63:69:d7:f5:90:58:f6:b8:08:72:b1:
                    53:96:0f:44:b2:82:f6:7a:e8:44:0e:3e:32:cc:2c:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:E0:F2:A8:7A:04:C3:DE:01:F0:8D:3D:12:86:97:1A:8E:41:E9
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:62:9a:0f:6d:9e:07:b5:46:bc:fc:80:ee:b2:00:61:86:5f:
         3a:4a:a7:3a:67:3e:56:ce:f0:d2:91:72:47:61:6c:92:2d:1d:
         00:b6:55:86:40:df:8a:f0:8a:af:96:93:31:53:25:e8:52:af:
         7b:58:b4:d7:9f:4f:6b:c2:9c:51:e3:c2:2e:ad:1f:6e:d2:60:
         b9:5e:e9:24:f6:d7:5c:84:7b:2f:28:e8:12:09:81:94:c5:a5:
         4f:ae:37:fc:4d:24:ee:9f:0f:0d:59:fa:01:8b:85:1a:e5:8b:
         1e:29:41:0d:fe:28:a5:ef:87:70:ef:38:38:ff:e1:ee:7a:02:
         ab:d3:a1:7a:c2:b9:57:ee:7f:0c:66:ff:69:55:6b:e1:5a:3a:
         0d:dd:36:aa:2a:b3:38:46:8f:53:91:b4:83:b6:76:1f:20:74:
         6e:c2:8e:71:0b:37:54:62:cc:c2:04:0a:ea:79:02:6b:42:d9:
         b5:a9:f7:35:e0:c3:c8:dd:38:9d:16:a6:09:f6:dc:30:c2:b5:
         11:ed:e5:3a:e5:bf:6e:4d:22:1b:48:9e:31:3e:cd:d9:de:e3:
         3a:24:e0:de:46:d7:d3:84:b7:cb:74:fb:d4:30:57:ce:28:f1:
         e8:d1:f4:81:15:ba:11:9d:28:9e:11:c6:e8:56:9d:e5:6b:50:
         47:da:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----