Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File:                     r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier:          87/ICVKHNcgPN9DAzM3EKauTYtH31XT9XMawvncvX2U=
Subject key identifier:   63:E1:FE:1B:09:EC:6D:DF:09:18:AB:25:07:1A:D1:87:4C:36:4B:E9
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer:       /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial:       01962E99A6A791817D414E168F65F70568EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number:          0CE2
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
                          2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
                          3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
                          4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: bSqFoeU3MatgWhpZEJVRj+CjFf8GXHGRg/LcSPERnk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a6:a7:91:81:7d:41:4e:16:8f:65:f7:05:68:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af935603e52e831537716d458b360192f99a3689
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=63e1fe1b09ec6ddf0918ab25071ad1874c364be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:a1:2a:b1:49:19:93:56:9d:af:17:92:3e:
                    60:39:d5:d1:b6:d2:dc:5b:06:0e:2a:ff:98:26:5f:
                    1a:17:b5:9b:88:21:63:c0:61:bf:61:af:ed:44:83:
                    83:32:ad:a1:2c:b3:67:bb:5a:55:3e:c8:30:f2:40:
                    f3:c2:db:84:be:f8:79:eb:73:44:8c:6b:00:4d:54:
                    bc:8d:00:2c:d2:d7:b2:42:58:4e:db:ae:9b:41:60:
                    fe:7c:69:ab:df:d4:be:68:ad:ad:53:b3:ad:b0:37:
                    26:b1:67:24:5f:ca:20:af:0e:46:b4:a6:52:d0:45:
                    57:a8:10:f8:93:69:dd:44:23:a7:d6:5c:40:21:c8:
                    c0:91:d0:c4:84:98:c3:a9:79:51:ee:04:51:b7:bd:
                    c4:82:8d:9e:6f:d4:6a:49:b1:b5:5d:17:fe:a8:eb:
                    32:6d:22:7f:6d:fb:ab:fd:df:cc:04:eb:72:19:13:
                    be:02:5e:18:ea:a8:17:90:74:28:5d:fb:f7:49:20:
                    92:e8:1f:6e:46:00:04:c4:62:00:31:55:c2:60:2a:
                    13:da:b3:39:86:b3:3a:ac:5e:bc:b1:86:64:64:11:
                    6e:29:de:df:14:58:cf:a3:a5:50:23:ce:a6:df:87:
                    8b:be:8a:0f:6c:14:6f:71:44:20:30:dc:4d:fd:46:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:FE:1B:09:EC:6D:DF:09:18:AB:25:07:1A:D1:87:4C:36:4B:E9
            X509v3 Authority Key Identifier:
                keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:31:9d:f5:36:b9:95:51:76:d7:57:e8:00:78:19:0d:24:
         9d:b7:b8:bf:f2:e7:5f:c5:c1:a4:81:25:e2:9a:5b:6a:9d:5d:
         19:e8:47:ef:3c:9b:c7:63:ce:e0:51:0d:4d:e8:b3:47:0d:02:
         88:44:1d:6c:81:0f:1e:6f:12:77:48:19:7a:34:58:a0:b5:7d:
         bb:18:6b:da:f7:20:44:79:dd:35:21:df:22:1d:e2:24:f4:a1:
         a9:e0:4d:fb:6b:e9:49:b2:07:47:c0:bb:cf:8f:ee:0b:11:35:
         7b:ac:e3:80:dd:93:71:49:ac:af:ec:6d:90:5c:be:be:1e:11:
         7a:55:72:2e:67:ae:17:71:b6:6f:73:21:bb:20:99:4f:70:20:
         ca:85:59:19:23:48:34:9a:71:4a:6c:99:0b:dd:87:61:97:f1:
         6f:a6:45:3e:a5:e8:bc:a2:af:27:ec:bb:ce:d3:39:a9:3d:85:
         03:03:bb:7b:11:6e:54:3c:1e:e9:a8:0b:0b:e9:9d:06:e7:96:
         76:4c:81:69:36:69:6d:fe:ff:bb:e5:10:61:ad:48:25:67:cc:
         f5:e0:1f:e1:c5:ef:ed:ba:f2:61:f0:32:3d:5c:a5:b5:f6:31:
         a9:3f:30:0e:e5:07:14:ee:b2:ab:6e:bc:43:69:9f:dc:5c:b9:
         79:73:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----