Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File:                     5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier:          I1ADLwqZDvNlsGjPQ6SUa6bRMOF8L0/LiArwAjxF4co=
Subject key identifier:   92:FC:CE:55:29:CA:97:A2:12:C9:ED:10:8D:24:11:61:31:4E:78:33
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer:       /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial:       01962FAB4BA4ECAE50BC8A4528A7F7E1D893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number:          01CE
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: FI7chpW28hs9zRJyuzRZLzXxVRmYBekt4B0/1MlSlfc=)
                          2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:a4:ec:ae:50:bc:8a:45:28:a7:f7:e1:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=92fcce5529ca97a212c9ed108d241161314e7833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:5c:82:16:61:e6:86:e2:8b:6f:43:64:e0:
                    ee:e9:23:77:7b:9a:cb:94:51:89:31:58:96:0e:85:
                    2e:97:3c:b3:df:58:58:c6:ae:63:0c:23:01:81:30:
                    b4:a0:4b:da:ca:19:5e:0f:e9:77:8d:c0:b4:7f:93:
                    db:60:b5:4e:36:75:23:8c:fc:53:d4:34:54:12:28:
                    54:d2:f5:8f:cb:91:1d:b1:7a:30:53:69:13:d9:5e:
                    b6:17:aa:8a:23:6d:f7:a9:29:9d:03:23:9b:6b:c1:
                    f5:b4:34:50:95:d6:f3:cd:5e:5b:83:26:03:6f:56:
                    92:4a:64:1a:04:83:8a:0d:61:3c:d7:7e:14:19:0f:
                    91:a5:8c:1d:2c:33:09:b3:61:92:30:a0:a6:8b:9c:
                    cc:f1:b4:55:b6:5c:80:b0:da:44:5d:f8:62:da:ca:
                    c2:84:32:6b:61:05:8f:b2:f6:86:13:0d:8f:41:09:
                    bd:7c:0b:f3:85:f1:ad:bf:3c:32:95:42:4c:a0:f5:
                    72:f2:2e:82:74:4a:4b:f8:74:07:a3:ad:d1:44:40:
                    cc:02:86:11:5a:59:fa:3f:ea:2b:d6:29:56:6b:96:
                    5f:72:22:88:90:64:5b:80:af:a6:fc:c8:68:a9:7f:
                    a5:fd:0d:20:f0:f6:82:d2:03:da:b4:14:d8:60:64:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FC:CE:55:29:CA:97:A2:12:C9:ED:10:8D:24:11:61:31:4E:78:33
            X509v3 Authority Key Identifier:
                keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:65:52:e8:b3:f7:0d:a5:11:09:e2:ea:35:87:44:3d:37:
         8f:02:b8:76:aa:8f:6e:b3:8e:61:f3:fa:ba:07:d8:28:e6:1a:
         6d:97:80:55:ef:f8:0d:ee:ae:a8:d9:8f:2f:2a:16:1e:3c:42:
         ab:41:aa:a3:5b:a0:7b:b8:0b:a7:60:8e:3e:29:5e:09:8b:c7:
         4b:cd:8e:58:b5:8d:dd:48:88:7a:e3:eb:24:3d:51:b1:89:88:
         98:28:1b:0f:dd:b7:0f:75:b5:46:7f:3c:6e:28:5c:07:ed:5a:
         95:1d:27:e4:70:a0:d0:8c:f3:9d:6f:67:a5:45:ab:cf:b0:e9:
         c2:35:1f:71:44:83:95:e5:fe:8d:c3:e2:74:48:49:d8:9a:d1:
         93:19:3f:bc:fc:b0:26:35:d6:1b:34:bb:18:f9:87:cd:97:e4:
         b4:7d:4c:cc:22:e3:9c:d9:72:ef:5b:15:c8:82:cb:22:b5:8b:
         62:b8:52:f2:6d:3f:82:ba:86:23:bb:9e:7b:73:c8:9d:ce:de:
         10:f8:98:0c:d5:26:f0:45:2f:56:21:55:09:50:f3:9d:69:29:
         7e:60:68:35:ca:f8:89:bf:6c:b4:d2:47:00:58:2d:a4:45:e9:
         52:e2:09:d8:d4:e1:0d:0c:4d:bf:56:5b:e0:47:ff:4f:a9:45:
         55:57:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----