Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          NiiKu282p0xM6CAR4rsnbFaMZBBc9qJ5PdH3u7Wi8ec=
Subject key identifier:   B2:B6:41:3F:72:F0:4C:3B:6F:A2:9D:7A:20:8C:7A:84:6F:1A:53:65
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       01962E2B2B9D46A83023E928CC5A4A672585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: xSj3QWBVOCyp/Rz04LizOuHnxkxZnHgeg1lM7JHUDJY=)
                          2: F2wMIUjJA3quoSXko94UBe524io.roa (hash: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=)
                          3: bE9Rz-JEgnY1OAj9NvLaQK985n4.roa (hash: oGUETehCghwYm99EJnoOLB6Ay5aT0Q2AYzU5/8NcyJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:9d:46:a8:30:23:e9:28:cc:5a:4a:67:25:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=b2b6413f72f04c3b6fa29d7a208c7a846f1a5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:61:57:18:0c:f7:b2:db:7c:15:ef:f6:2f:
                    28:db:16:37:fe:b2:62:16:71:e3:e5:0d:38:6f:fe:
                    22:d8:68:7e:58:fe:68:d2:fc:e4:42:b9:67:d9:02:
                    52:d5:41:e8:1f:78:82:f8:99:29:96:ea:b9:64:77:
                    ec:3d:de:68:25:d3:eb:32:c2:47:cd:b8:2b:a7:52:
                    fc:32:5d:54:68:91:28:27:ff:f9:9a:93:17:d7:d0:
                    35:f5:02:a9:89:61:82:e8:40:0e:db:b7:f3:cd:bd:
                    0b:96:a5:96:dc:f1:50:e6:55:d7:a6:d9:09:a5:5d:
                    87:1d:9a:0b:e4:d2:b1:8f:5e:c3:63:fd:96:a0:98:
                    c0:36:02:0d:f6:17:1c:b4:ad:23:fa:5b:23:21:39:
                    7e:3a:22:6e:43:9a:c1:89:dc:13:29:38:cc:5a:87:
                    aa:85:ed:65:ba:eb:0f:fa:27:d6:83:0b:f6:ea:c0:
                    82:ed:38:f3:d8:78:a5:db:61:95:85:0a:b3:5f:61:
                    dd:9f:d2:67:07:be:0c:dc:f3:4d:94:a4:59:09:24:
                    b8:2a:c7:a5:f8:1e:64:c4:f3:1f:29:9c:8d:18:f0:
                    80:31:b0:e6:e0:2c:2c:50:8c:18:bb:50:5f:40:5d:
                    fb:36:5d:eb:a3:00:98:4c:3a:54:2c:a2:60:f4:a9:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B6:41:3F:72:F0:4C:3B:6F:A2:9D:7A:20:8C:7A:84:6F:1A:53:65
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:d9:d1:cf:f8:45:00:39:d6:1f:7b:0e:ae:b2:8b:24:d5:
         c0:91:40:98:ba:fb:03:66:dc:cb:7a:7b:d4:7a:c9:65:00:0b:
         87:43:01:60:13:2e:9b:60:b0:ea:1d:99:c5:b9:ce:18:ef:e3:
         54:e5:60:90:47:6c:39:58:61:14:52:6e:39:c9:ef:4b:1d:9b:
         5a:47:86:cd:e8:c7:5d:ab:a6:c8:d6:03:92:c8:b6:03:7d:ab:
         cc:9c:96:c0:fc:9e:ea:8f:d3:46:27:d8:e0:82:cb:d7:8b:a0:
         d3:e9:cb:a0:e7:6c:f7:99:be:a6:62:99:6a:b6:62:08:9a:47:
         25:f2:14:fa:f3:88:13:3d:f3:da:6f:5b:67:b9:6d:63:49:e1:
         a4:dd:e6:4f:a8:3a:4d:a9:24:1a:4c:d7:a4:9b:ce:b3:02:5e:
         72:fc:ce:37:45:73:17:54:2a:6f:99:b8:d6:5e:b5:15:b8:4d:
         ee:82:e1:f8:41:46:8f:20:b9:83:dc:c8:3b:7d:cc:ff:3f:e8:
         e6:43:eb:4a:4b:51:d6:c8:b0:f8:e3:96:05:05:9a:cf:ce:51:
         b5:13:e7:33:2d:90:36:c7:cc:11:9f:4a:4f:89:89:68:62:d0:
         18:90:b4:18:36:b7:70:1d:c4:39:e0:97:96:66:67:b8:b4:20:
         d6:d9:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----