Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File:                     5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier:          8sdwjmvFyEm68OshnYbeoiRW65Dvi08eRPN0gBZyqMU=
Subject key identifier:   66:3F:8C:C9:3F:89:6B:81:44:BD:06:15:EE:F0:58:BB:8B:23:7F:D5
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer:       /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial:       01962E99674DE1211E9AACA768AFCA1E2F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number:          FD
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: FHtVMsAR9zMjXm5sbfgUW1PmbGPf5W6b2qJO0iUXKuc=)
                          2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
                          3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:4d:e1:21:1e:9a:ac:a7:68:af:ca:1e:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=663f8cc93f896b8144bd0615eef058bb8b237fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:e4:d7:19:5b:05:97:17:07:98:e2:c4:89:
                    d5:f6:56:4f:50:8f:52:77:22:eb:91:96:80:5a:ac:
                    20:87:32:b1:08:52:c8:2e:a5:9a:d4:d6:59:98:6f:
                    50:6e:ca:53:1e:d2:1b:9b:67:6f:69:96:61:24:c2:
                    31:f0:0c:b0:4e:95:52:5c:0a:1c:61:9d:20:02:6f:
                    b0:ae:f5:13:0a:f1:05:80:77:61:75:00:a7:92:38:
                    7e:44:b6:a3:7d:48:d5:e2:ed:66:c2:35:e6:74:11:
                    d9:c3:7b:6b:10:b9:68:ce:43:2d:87:ba:a8:31:a2:
                    0a:9c:0a:ff:c4:d7:3e:93:55:a4:3c:56:30:cc:f9:
                    6b:56:14:1b:d5:24:da:51:02:68:93:4f:41:f7:37:
                    fe:56:65:7e:f6:5b:9c:54:cd:f5:3c:ce:a2:b6:a3:
                    e5:7d:75:4a:f8:da:05:20:f6:cc:0c:9d:b4:bf:e0:
                    56:1b:87:32:09:1e:fd:1c:1b:90:2c:d0:e9:72:c1:
                    26:7c:a3:5c:6c:06:ef:19:6c:bb:8d:5c:66:f6:44:
                    1e:2f:75:f0:c6:af:48:da:ce:72:59:9d:f3:b9:ac:
                    62:1a:fb:f9:96:c4:17:dc:cb:5a:ba:c6:c2:c2:29:
                    4c:56:5b:0e:63:55:b6:34:30:d2:72:e2:3e:e5:95:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3F:8C:C9:3F:89:6B:81:44:BD:06:15:EE:F0:58:BB:8B:23:7F:D5
            X509v3 Authority Key Identifier:
                keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:77:8d:7c:e2:b1:d9:fd:65:4e:8c:62:c0:a3:6f:1f:28:34:
         3d:fa:a9:fd:da:cd:68:8c:bb:5d:1f:7c:fe:e2:3b:0a:ce:cd:
         14:3d:08:49:e7:75:d8:33:51:a7:fa:3a:c1:cc:f7:50:74:51:
         6d:0d:71:a5:3f:ed:7a:17:e1:b7:af:bd:8b:d2:42:17:b6:c1:
         de:6c:7f:fa:ef:d6:d2:af:7b:8c:68:ed:ef:2e:20:96:ab:51:
         62:ed:90:0b:a1:c1:66:e5:c9:ba:0c:19:26:3b:7b:14:11:56:
         96:34:bb:62:c4:cf:82:ae:0c:91:c0:d0:a2:b9:fb:e6:4e:fe:
         47:a0:29:bd:35:a0:50:3f:e0:36:dd:3e:f2:85:1b:91:fb:1e:
         c6:03:bb:0d:32:6e:d2:8f:0c:70:6e:c0:cc:23:61:4b:d3:af:
         e2:cd:9e:03:eb:85:55:22:46:8f:b5:25:ab:ef:55:54:c4:48:
         3f:e7:02:63:a6:93:b8:db:7c:e7:2f:98:ee:a5:1d:8e:c6:48:
         eb:10:6c:4f:8a:9f:da:76:b8:33:df:63:1b:dd:89:09:2e:8a:
         89:d7:2f:49:8f:ae:98:54:bf:75:72:07:a9:ac:09:56:3e:6d:
         3b:c0:6b:95:ba:d4:ca:8f:a8:fa:67:1c:c8:76:c8:15:b9:aa:
         02:11:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----