Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File:                     XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier:          oV1+0gt91w+VrY2xS0Dl57BkVdO6xZR7ZoUF5VWHn/I=
Subject key identifier:   45:A5:D7:93:DC:A6:2A:88:75:B7:7E:AA:DC:CA:61:81:37:AD:B8:67
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer:       /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial:       01962DF432AC7781B6CA88EAC5535D8DA7A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
                          2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: qu5DByKPFWm0P3KY1aJYsiQ2Sy5y9fTvWMZ570tedSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:ac:77:81:b6:ca:88:ea:c5:53:5d:8d:a7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=45a5d793dca62a8875b77eaadcca618137adb867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:70:c4:1b:22:ba:c6:8a:a0:44:23:e7:41:
                    f3:a6:fc:59:64:a7:d6:78:48:92:d0:e7:11:d8:79:
                    da:64:6f:85:d6:c2:52:ce:8c:dd:f9:f6:b8:f9:bc:
                    30:5b:d0:c5:35:9b:01:f4:e9:6d:a2:42:2f:f5:c1:
                    01:ad:66:91:0e:c6:bf:3e:60:61:7b:84:ed:78:f9:
                    7e:21:6c:33:33:4c:69:1a:92:f6:8d:7d:3e:29:eb:
                    da:17:d3:0f:4a:07:e0:66:5d:c0:2d:40:b0:ec:f6:
                    2b:4b:1c:de:e8:30:c8:9b:f5:24:92:02:37:91:ee:
                    2e:0b:3b:c3:0d:d1:f0:ed:33:f4:55:6c:d2:ab:a1:
                    d3:40:47:f0:89:78:b9:47:9c:7f:f3:b1:02:ef:d6:
                    c2:d3:d4:c0:ac:25:a4:83:d4:03:87:35:b1:2f:22:
                    a1:47:f1:f1:a3:0e:f3:e3:24:12:c5:57:d1:68:0a:
                    cf:e3:d8:dc:d6:c4:81:d0:ad:1a:ec:87:95:4a:56:
                    4e:99:6d:e9:8d:70:24:f0:8f:67:a5:d7:d9:2b:df:
                    e8:27:06:56:fb:65:9e:16:fb:80:86:63:7b:b9:02:
                    33:29:12:c8:24:4c:0d:65:a5:7a:05:38:08:8c:d8:
                    c0:65:83:53:14:eb:8b:6b:7d:74:5d:f9:7c:65:9d:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:D7:93:DC:A6:2A:88:75:B7:7E:AA:DC:CA:61:81:37:AD:B8:67
            X509v3 Authority Key Identifier:
                keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4c:52:65:5b:a1:e7:59:71:3c:8b:84:2b:98:c3:58:c7:24:
         38:5c:6c:4d:e2:a3:b3:9b:a0:3c:cd:96:83:fd:b9:66:6d:a4:
         aa:78:6a:bc:d6:cb:4e:5f:28:08:76:cf:6f:b5:6b:98:1b:17:
         11:eb:59:37:bf:b6:f0:71:a5:28:a0:d8:e4:97:e7:d3:43:8c:
         92:c8:6a:09:aa:73:b2:40:2a:ca:08:56:fd:60:33:9b:a1:ee:
         25:e0:e3:5a:51:4a:6a:e6:48:b6:04:d2:b0:ee:59:bd:cf:f1:
         b0:d7:07:ad:fe:c8:65:51:0d:c5:81:79:f6:ef:ce:37:4a:b6:
         55:28:b8:b7:e4:eb:f3:74:69:df:df:b7:ea:c5:38:ca:08:59:
         1a:fe:52:b2:e5:1f:14:f3:9f:63:df:d8:d9:88:f4:ca:cb:7e:
         c3:ba:a3:d9:3c:f0:28:f0:0c:9c:34:32:dc:37:d9:48:97:45:
         c3:b5:e2:2f:19:3d:59:d9:73:79:1f:08:71:51:24:e5:b0:b9:
         c8:5e:90:88:63:64:44:ab:1d:16:24:83:d7:d2:15:7f:fe:16:
         b2:99:ca:36:d1:b3:76:a9:38:85:f3:4e:65:cf:e3:2e:fd:41:
         b6:74:be:86:79:c9:28:22:ab:ff:22:e5:02:a4:b0:0e:cc:50:
         57:3a:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----