Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File:                     5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier:          C7wfP/tfBE7Pn4GnQXhqoiXJ17gyEV6xZKfHne/U2kw=
Subject key identifier:   34:F1:7A:FA:B1:D4:D4:B4:88:F7:CE:CC:7F:FB:BB:A4:A1:C7:FE:86
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer:       /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial:       01962ECFBCB9181CAFE3A2201B1D46B712E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number:          CB
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: 5RrPYaJnAHN/iY9gC03tHmH8NtS+lGPI4X8mcbURAwU=)
                          2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bc:b9:18:1c:af:e3:a2:20:1b:1d:46:b7:12:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=34f17afab1d4d4b488f7cecc7ffbbba4a1c7fe86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:a1:37:ba:37:6a:ec:8c:f4:6a:26:d6:72:
                    ec:0d:c9:ca:35:45:7d:3d:aa:bf:b2:4a:90:39:52:
                    9a:9c:d1:7d:84:49:55:e7:c3:22:79:3e:ba:60:a3:
                    e5:aa:f1:20:34:58:2e:ad:45:69:fe:9f:58:a7:b4:
                    be:15:fa:7d:77:57:53:b2:bf:6c:81:f6:bd:77:03:
                    b9:a6:25:82:e9:cc:00:95:c5:70:ed:32:3b:bf:c9:
                    2b:dc:1d:a2:d2:6e:2a:31:6c:cd:bd:2f:d0:05:cd:
                    86:f0:03:d5:5a:49:d7:0c:80:90:75:18:ed:c0:dc:
                    d8:1b:c2:c4:d0:bc:d5:91:12:6c:a8:41:8a:2b:52:
                    de:c5:9a:54:72:bc:89:07:52:a8:42:ea:1d:f6:1a:
                    cc:cc:0f:e4:7a:9e:21:77:64:86:2d:58:7b:23:01:
                    de:80:f3:7f:37:7e:83:19:9f:d6:a2:fc:25:2e:a9:
                    24:6e:a4:d3:6b:db:61:36:02:0e:9d:41:28:6a:66:
                    35:bd:d0:ae:a0:e8:3a:5d:bb:5a:58:7e:fa:4c:a0:
                    2d:d5:8b:d5:a9:c2:6d:32:29:13:e3:69:98:da:d1:
                    3e:4f:d9:87:d4:fa:6e:84:d7:25:01:cb:dd:d7:28:
                    18:33:8c:bf:e0:43:9a:c8:93:96:88:2e:4f:8f:6b:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F1:7A:FA:B1:D4:D4:B4:88:F7:CE:CC:7F:FB:BB:A4:A1:C7:FE:86
            X509v3 Authority Key Identifier:
                keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:3e:1e:9f:59:fb:75:95:0b:87:70:ee:88:59:33:66:d9:d9:
         ad:ab:51:0f:55:73:8c:1e:2e:91:96:da:6d:6c:7b:43:f0:e0:
         39:a0:d5:2c:1d:13:ad:7b:36:25:ba:03:94:f7:dc:e0:73:50:
         8c:50:f6:eb:d7:6a:1e:69:6c:34:51:59:f9:16:9c:36:f3:c4:
         c4:89:fe:e0:b4:a0:b7:cc:10:33:2a:50:a6:d9:78:e0:57:72:
         c8:4f:97:24:a5:30:1d:c2:63:f4:67:54:d7:f6:24:98:d9:9b:
         de:4f:7d:dd:e7:50:90:ab:02:19:95:66:1b:4d:9d:af:51:90:
         0d:66:65:e0:f3:09:c3:2a:ec:6a:01:72:b6:0a:5b:83:25:72:
         9a:e8:2f:b0:a0:ba:11:32:b3:c8:75:00:42:3e:7f:0c:8a:c3:
         bf:5f:ea:37:e2:f5:55:b6:de:ee:08:ce:db:df:67:3d:f7:da:
         0e:b4:ef:5f:ab:dd:a9:1d:b2:68:bb:79:e5:16:8b:68:b3:88:
         48:1c:83:dd:cc:45:1f:c5:3f:9e:3c:bc:50:ed:58:06:9e:df:
         79:b9:d2:45:8c:0a:b5:01:39:b2:d9:dc:02:92:e0:45:49:c7:
         3a:41:fc:a6:aa:16:45:89:ff:ff:9f:80:7d:cd:32:fd:e5:9e:
         32:28:41:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----