Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File:                     5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier:          FFAI6dQEfg/vK/gufRP4ftgCQ98q7k6z6uahTcHlllw=
Subject key identifier:   C2:F4:EE:89:36:DB:E9:08:0F:F8:33:9F:5C:4E:5A:02:6A:06:F9:EB
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer:       /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial:       01962F06806EF52B686CD0A9E8D90149902D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number:          0AE8
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: nK/wEupMdRTgJyF0QYntJou+Y3N4HlNhhr/o+y/LzSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:6e:f5:2b:68:6c:d0:a9:e8:d9:01:49:90:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=c2f4ee8936dbe9080ff8339f5c4e5a026a06f9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:74:b2:f9:be:13:66:9d:62:a1:9c:17:e0:
                    de:84:e4:7e:14:1f:40:f0:6e:6a:ff:f5:af:54:ad:
                    21:0f:8e:81:3c:35:7c:82:ac:5a:13:8d:45:6e:b1:
                    34:12:40:9a:9e:84:1e:29:81:98:ee:db:e2:bd:7e:
                    80:13:73:e8:f6:e4:3f:19:19:f6:59:01:67:82:92:
                    95:1e:77:c8:52:bd:8b:e0:cd:48:48:44:8d:35:6f:
                    4f:ee:22:9b:68:6c:6d:37:22:c0:f7:74:d0:1e:35:
                    1f:6a:95:09:15:f6:14:27:89:1c:f2:75:34:a4:4e:
                    3c:f0:6d:b5:5c:8b:96:60:b2:fc:67:ca:f3:dc:05:
                    7c:a9:42:29:76:10:73:2e:fb:77:12:6b:1b:8c:7a:
                    c7:b4:75:aa:50:52:85:c4:67:e2:74:5c:62:ca:50:
                    5c:8c:60:27:da:70:59:c2:44:be:6c:32:e3:9d:4a:
                    d8:5a:ed:ff:0d:84:86:7c:ae:c5:c8:ce:ee:48:76:
                    ab:e5:18:2f:97:88:01:ba:65:1f:3d:81:be:18:cd:
                    a1:8e:d8:c3:3a:4a:78:f2:67:80:c2:d6:55:bc:61:
                    c7:0c:91:6f:e4:5f:9a:62:69:17:b5:5a:ab:0d:c8:
                    78:8a:63:a3:ab:86:f6:7e:1c:e6:a8:16:a5:48:b4:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:EE:89:36:DB:E9:08:0F:F8:33:9F:5C:4E:5A:02:6A:06:F9:EB
            X509v3 Authority Key Identifier:
                keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:79:f2:5b:ac:b1:09:43:6a:a1:40:82:75:29:66:15:a9:8b:
         00:48:3e:b8:94:b5:69:1d:34:df:9a:6f:4f:c5:e9:bb:ff:af:
         e5:47:7e:ca:74:65:7a:b5:97:1f:4e:c2:af:b3:fd:cf:86:6b:
         46:63:06:86:ea:85:36:df:69:32:ae:90:b0:5e:8e:14:8f:0f:
         78:49:31:af:5d:02:5d:63:a1:e6:f5:30:7d:a9:48:13:83:be:
         d7:35:f9:01:98:6a:d8:65:06:ed:0c:a7:b0:16:0f:5e:5f:1b:
         32:f6:41:c2:bb:16:db:bf:4a:77:83:2f:b4:08:4d:48:bc:a5:
         0a:aa:7b:28:36:78:5a:64:66:d5:42:94:0f:ad:e7:54:dc:70:
         b8:7b:4f:5b:d0:f4:d0:e0:95:ff:47:0f:e0:c1:d0:16:af:51:
         3f:59:5d:fc:88:16:c9:d9:75:5c:7b:9b:85:52:90:41:7a:28:
         ec:21:cb:97:b2:cd:b3:6e:af:67:3f:18:ff:10:9f:ff:4a:83:
         93:16:8e:a1:d6:77:5a:bb:44:03:1a:53:ef:7f:bb:c9:11:3e:
         3a:83:ff:3b:12:a8:3b:a4:99:d4:69:e6:52:f6:51:40:b3:35:
         b6:1e:50:bb:c3:eb:ca:cf:5d:c2:46:9d:3c:e3:43:67:0d:dc:
         b7:09:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----