Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File:                     5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier:          qjiJUa/aaKJdWAiR/TYOndxAKA+ueMJQe/mfIQcsHEs=
Subject key identifier:   5F:9E:65:C5:62:90:DF:F8:3C:C9:CC:52:F2:C3:42:C3:E0:71:7B:F2
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer:       /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial:       01962E2B508598D8105B01CAC88D9C29D34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: poio3CWKkhwGW7n5y6mS+o7/D3a4YrC1VxKzhOAByxQ=)
                          2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
                          3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:50:85:98:d8:10:5b:01:ca:c8:8d:9c:29:d3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=5f9e65c56290dff83cc9cc52f2c342c3e0717bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:81:bf:5c:8e:6a:0c:4b:50:05:50:ca:a4:
                    be:ef:cc:60:ca:62:89:47:a8:80:f8:d7:d6:01:03:
                    b2:a3:22:8d:c9:15:be:ce:c4:33:32:18:70:75:63:
                    bd:02:a9:ab:e0:ad:be:d0:9c:f5:d0:35:31:22:aa:
                    95:d4:f8:7f:4d:25:70:b0:f5:57:28:bb:aa:cb:b0:
                    6e:8f:8f:b4:48:d5:e3:06:3d:15:63:68:4d:23:ea:
                    c2:22:bc:d7:a0:f3:15:90:ea:00:bf:59:90:23:36:
                    45:60:1c:f9:1e:cd:b0:b8:ec:f7:d5:b4:a4:73:c0:
                    7a:09:3f:b5:a1:93:28:35:11:17:c9:ca:0c:49:0a:
                    3b:7c:08:e8:78:87:66:f1:25:05:2d:77:75:e6:b1:
                    5a:96:d8:b4:66:1f:70:cd:48:2f:6c:75:ca:21:87:
                    94:57:c8:9e:fb:2c:5b:47:99:84:5c:3c:67:2c:48:
                    f2:9c:9c:51:a4:93:73:b5:b8:20:04:7a:e2:35:9f:
                    e1:1f:39:86:97:89:ad:44:c1:9a:73:3c:57:c4:76:
                    18:d3:d2:dc:7d:2d:e5:5d:d8:37:d8:c2:c5:5d:1d:
                    14:1c:03:4c:8f:68:9b:ae:15:0a:46:28:cf:7d:60:
                    6b:45:c5:89:07:14:34:a9:30:15:46:df:8b:b2:a3:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:65:C5:62:90:DF:F8:3C:C9:CC:52:F2:C3:42:C3:E0:71:7B:F2
            X509v3 Authority Key Identifier:
                keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:49:a7:cf:7e:49:05:2e:93:55:76:ad:a2:e7:d8:cb:b2:8b:
         7f:2f:e8:29:31:36:0f:1e:e2:6f:20:58:6d:0d:47:8f:10:20:
         80:72:65:5f:e1:5b:4d:cd:66:eb:53:7a:3a:14:e8:9e:4b:b5:
         7a:ad:69:07:34:23:4e:5b:12:45:81:1b:f0:b7:40:08:dd:b2:
         d2:91:2f:c7:6b:2a:8c:bb:b3:a4:40:bf:e3:6a:01:96:84:db:
         2f:47:c4:54:ca:18:fe:2f:a6:ed:48:a7:04:99:66:71:82:ad:
         3f:57:40:eb:fa:bc:24:42:e6:b9:b7:70:06:f8:1e:b0:3b:e1:
         f9:f6:b5:96:d9:88:28:17:1e:1b:e7:7a:4d:c9:49:0e:fe:1a:
         bb:e6:39:39:86:ee:ee:34:45:80:b5:4b:c0:42:c1:83:ce:1f:
         17:d4:46:55:98:25:ff:6e:2c:e9:b6:8c:c8:bf:10:8c:62:22:
         05:b7:d5:db:67:f5:c5:c0:cc:43:8f:2e:bc:ba:af:30:d2:d7:
         15:6d:c5:2d:e9:a7:33:67:ff:53:2c:fd:2a:ac:5c:51:b3:61:
         12:f9:85:41:f9:bf:13:5b:fe:64:e4:9a:eb:87:4e:4c:eb:ae:
         32:7d:31:07:4b:9f:43:e7:67:93:2c:e0:56:15:37:39:51:8b:
         c7:5d:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----