Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          rR2LLxam4BmlMfQ9vQBU+dqjIufnmYFDioHgC1zROL0=
Subject key identifier:   23:37:F0:10:DB:68:11:35:40:C1:5F:34:B7:56:C1:35:41:C1:E3:13
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       01962F064195FE10D73746B3C84920251682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          FF
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: nAWbHhl5gw20I+srAYVB0Qo8asXzBHePy9PFhCchFy0=)
                          2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:41:95:fe:10:d7:37:46:b3:c8:49:20:25:16:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=2337f010db68113540c15f34b756c13541c1e313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:6a:93:62:ab:b5:cb:85:c9:16:8a:bd:ec:
                    12:bc:bb:c5:d5:ff:23:e5:d1:7e:07:e6:66:c7:a8:
                    2c:dc:f7:38:48:b9:cd:98:5d:d6:63:4b:c5:0b:6f:
                    a9:20:08:43:9d:c1:e1:d1:dd:0a:dc:27:16:ee:ae:
                    23:09:2c:fa:a1:df:4e:dd:44:84:47:56:0b:76:3e:
                    40:1c:01:6e:46:dd:e8:42:c6:31:b3:c9:ea:6c:5a:
                    92:07:df:ee:ca:9c:b1:ea:fa:ef:f1:29:3d:1d:a8:
                    ab:63:bc:9b:4b:a6:fb:2d:ed:27:82:e8:55:cc:55:
                    89:5c:71:64:88:34:27:bd:8f:ee:f2:99:6b:55:42:
                    22:5c:74:b5:b0:11:50:d8:98:4d:e3:11:50:90:0e:
                    03:5d:ed:56:0c:ee:d7:27:e7:f9:f3:dc:4a:f2:4c:
                    89:c0:1e:91:b5:96:e7:e7:09:4b:e3:e3:18:f2:b0:
                    63:4c:fe:bf:50:4d:49:32:b5:b6:ec:82:4d:5d:4d:
                    90:f1:99:41:3c:32:f0:f0:78:3b:94:f5:58:f4:4e:
                    3f:9f:fb:c6:e9:32:ee:c5:ec:12:b4:f0:c0:53:fc:
                    ad:19:0b:72:15:e7:4f:0e:cb:58:05:d7:69:06:b7:
                    4b:1c:61:59:84:70:49:6e:a1:21:db:23:b9:ad:61:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:37:F0:10:DB:68:11:35:40:C1:5F:34:B7:56:C1:35:41:C1:E3:13
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:ad:49:ad:21:68:2d:b2:ad:5a:38:ed:f9:7a:e2:88:98:
         aa:a3:bd:0d:b8:ee:5a:ef:b5:11:d4:e1:cd:df:17:e7:ee:8b:
         4f:cd:c2:ed:f4:16:a5:d9:de:fd:a2:7b:96:ba:89:e0:08:9b:
         70:2f:37:9a:9e:5c:f3:ba:46:17:42:25:1d:76:8a:81:65:16:
         8a:71:52:62:4f:39:a6:87:a8:6e:0d:71:63:ab:01:1d:23:47:
         d6:05:36:6a:f6:ef:f2:32:57:0b:3c:7e:1d:3d:8d:1a:48:60:
         2c:a9:aa:27:cb:aa:b8:99:c4:47:0b:4d:17:de:b8:f7:e8:2d:
         77:3e:1b:a6:1e:bd:27:42:da:10:04:97:f1:b5:46:81:ac:8c:
         0e:fa:62:07:f6:8e:80:55:03:d0:c2:b6:b9:61:b8:af:2b:63:
         0e:e5:2d:9b:8c:44:51:c4:12:91:55:11:4c:aa:45:99:38:10:
         88:9a:5a:87:df:63:c9:c4:9b:9b:aa:10:3f:76:a2:fa:65:04:
         74:67:10:fd:02:54:7d:3a:60:d5:f1:50:cd:7f:43:a9:4c:dd:
         07:a7:e5:d7:51:21:dd:10:83:38:40:b6:1f:db:0f:ab:ab:77:
         da:60:a3:c4:09:c6:11:66:f2:31:b9:d1:0b:e6:bf:66:3f:64:
         42:98:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----