Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File:                     5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier:          VRto5WvwDbZYvvcBCLd8iZLQbcyWQ6os4jCVnvqt61Q=
Subject key identifier:   FB:C0:4D:4C:9E:C6:6F:39:13:6A:FE:3D:82:06:1E:E2:23:BB:B6:4F
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer:       /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial:       01962DF3FBC0414CE0FDBC1F4CBDFD0D22AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: EcJT1E1vRH3ElCzcWKnkHerWOfFRGKUGBrHwfyPz6LA=)
                          2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
                          3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fb:c0:41:4c:e0:fd:bc:1f:4c:bd:fd:0d:22:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=fbc04d4c9ec66f39136afe3d82061ee223bbb64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:92:2a:db:cf:28:ca:b6:b4:a8:f3:6c:87:
                    24:28:d5:8a:c4:5c:90:a3:13:9e:07:f8:a5:59:f0:
                    5d:ef:ec:7d:26:14:1c:29:d5:ba:3f:7d:46:1b:eb:
                    c5:9d:9b:cb:b3:3c:73:05:87:10:05:90:7e:ab:87:
                    9f:a3:23:5c:4f:81:49:d3:62:5e:a1:89:d5:f8:fa:
                    76:14:c4:59:67:63:dc:49:f8:36:14:3a:fd:cd:b1:
                    bf:5b:e0:54:07:f0:60:be:05:d9:00:3d:f8:42:e1:
                    db:70:62:a7:73:8a:05:c4:9b:fd:67:de:5e:49:bd:
                    70:4d:d7:93:6a:7f:e2:54:6b:98:30:4c:cc:9d:6d:
                    fa:97:fa:a5:4d:29:71:fb:1e:e1:79:91:81:08:6e:
                    d1:87:c7:26:8a:39:3c:21:28:3e:0a:29:b6:d4:d0:
                    bd:76:3e:4f:e3:fe:33:5c:02:13:4b:a6:36:da:94:
                    e0:05:2d:eb:5c:eb:79:8c:d3:35:1b:d2:18:50:44:
                    d1:b8:2e:3e:8c:5a:2f:e4:92:61:2f:d0:fb:26:51:
                    bf:d5:0c:15:a1:75:00:be:3a:31:17:17:8f:3d:2c:
                    d0:76:64:4f:88:16:9d:23:ea:77:70:5c:f2:c4:05:
                    c5:8b:15:c1:6b:1e:0b:c9:31:6a:74:40:e5:7e:b0:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C0:4D:4C:9E:C6:6F:39:13:6A:FE:3D:82:06:1E:E2:23:BB:B6:4F
            X509v3 Authority Key Identifier:
                keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a7:f8:fb:1a:e6:63:d0:bf:a0:b3:26:c6:23:54:16:c8:7f:
         f9:b4:5f:86:1d:4c:bf:22:be:fe:00:a9:24:2c:c4:7a:ce:53:
         2c:e6:ab:eb:43:36:f5:b2:3f:18:2f:69:02:f8:da:0f:38:ff:
         d8:ca:85:d8:6e:fa:a0:d3:94:77:26:b6:6a:8e:42:bf:db:a6:
         82:13:4f:9a:eb:d2:11:27:e1:d2:db:e4:83:22:ad:dd:2d:80:
         a5:7b:93:f6:e2:1e:15:1a:c1:7e:5b:99:5d:a7:fd:66:7b:b8:
         c1:24:74:50:be:d0:fe:6b:4f:d0:fa:d7:1d:b8:8e:ee:b2:11:
         81:93:8d:c0:10:fb:69:28:6c:47:5a:12:f4:75:97:ed:ca:eb:
         a1:a1:ad:67:2d:a9:b4:43:79:18:75:e2:4c:99:e3:38:2d:cd:
         90:c1:3b:8d:79:32:8a:39:a2:36:79:bb:c3:5b:a6:96:0f:33:
         4a:31:3e:aa:c8:41:35:97:0c:47:63:b1:e6:a4:fa:53:1f:62:
         bb:af:9c:70:93:e5:2c:60:db:ee:fe:9c:4c:f9:3d:66:e8:32:
         de:9b:e5:c2:55:74:dc:14:dc:4e:35:57:94:aa:85:56:da:fe:
         3c:e5:bc:b6:a4:f9:82:40:63:49:e4:1c:71:99:41:87:47:8f:
         dc:5b:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----