Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File:                     X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier:          87rdd1AT++yGTJdXOmXgfJTWczXGUO2+qSyz/BJQFHw=
Subject key identifier:   E8:DD:04:20:E0:39:21:69:0F:66:5B:55:08:58:F9:4D:F6:56:32:60
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer:       /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial:       0195E046601D7B3F92B4D71DD83668F90A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number:          137A
Signing time:             Sat 29 Mar 2025 05:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:03 +0000
Files and hashes:         1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: mJGgTOI9u4Esy9iZP+iAdQ4yCqYGNRMohMl3L/m35q4=)
                          2: cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa (hash: 3JeVGhOmnf8UAWFgpjcbUPRndvwOtl5MmVpvoRBsyvw=)
                          3: evKhJ57xaSzVNl3Qur7cE-8m3B0.roa (hash: aCKoxKyHcj4KLd0GXx48dLEfPi6FKkTqW5i/PZZzxQY=)
                          4: g48iOiDRDJ_XgJvC4YquAwkHpcU.roa (hash: W/4pzvw1CPsXQg+e4ipuVBiSg+Ao5Jez6JAYyxmb4bg=)
                          5: qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa (hash: maKG5skNiEELx6cnhHvPmlu2+gxjGrUB3RJ4ysfb/0Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:60:1d:7b:3f:92:b4:d7:1d:d8:36:68:f9:0a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
        Validity
            Not Before: Mar 29 05:01:03 2025 GMT
            Not After : Mar 30 05:01:03 2025 GMT
        Subject: CN=e8dd0420e03921690f665b550858f94df6563260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:61:cd:5d:75:1f:bf:1a:de:61:62:33:6b:a5:
                    0f:b5:09:fa:d9:34:e5:4a:a6:6d:59:dc:e9:d3:f8:
                    3c:8a:4b:a2:6a:ec:47:bd:0f:ba:e6:b2:ff:69:3b:
                    c2:68:31:df:d5:ea:ea:2f:6f:76:d2:e6:77:34:7c:
                    bd:16:8a:83:b8:09:13:8a:b1:c4:b9:84:cc:7c:43:
                    60:d8:24:12:32:6d:ba:a0:74:e2:35:50:66:9f:99:
                    e2:c2:c1:9e:f0:d3:48:5d:b1:19:b4:94:68:98:91:
                    9a:54:47:82:65:c0:05:c5:2a:f7:6a:c5:31:16:46:
                    40:76:c1:68:fc:3f:3a:5f:9e:da:2e:3d:ab:98:a7:
                    3c:d4:5a:0e:6e:85:4c:ce:91:b5:3e:90:e0:2e:7d:
                    f8:b7:8e:68:52:ee:30:1c:be:14:8c:84:c8:e8:a6:
                    43:58:d4:53:eb:ae:1f:89:42:44:5c:67:d1:80:f2:
                    85:f8:be:1c:99:bd:cd:56:51:de:31:d2:9b:db:1c:
                    c4:0f:78:99:1f:20:4f:6e:40:1f:49:33:c7:04:9a:
                    8a:12:f1:8f:46:66:58:3f:7e:9a:48:75:72:59:0b:
                    46:6a:89:88:7d:37:ef:df:c1:5f:2d:5e:22:68:9f:
                    e9:e6:76:ff:b1:ec:ec:f4:ac:79:47:01:44:0b:cf:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:04:20:E0:39:21:69:0F:66:5B:55:08:58:F9:4D:F6:56:32:60
            X509v3 Authority Key Identifier:
                keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:de:7d:6f:19:bf:f4:09:32:b6:02:3e:24:ff:a0:8d:23:
         d1:c2:af:62:2a:b4:b8:94:58:81:6b:49:db:39:44:85:bd:54:
         fb:1a:4f:79:33:e8:41:6b:87:c3:e6:00:7f:01:89:d4:51:49:
         7a:d1:40:10:a4:db:3f:d6:6c:d8:3d:cc:68:d6:bb:e3:a4:e0:
         91:76:08:c4:e5:c4:f8:81:04:e0:90:e6:e4:c6:fd:e5:a7:73:
         4e:37:f9:80:10:6f:f5:eb:59:ef:a0:7a:5b:12:ec:ef:e6:57:
         5d:3d:a5:9c:12:3d:72:7b:9d:4a:b1:9c:61:b8:ab:d5:5b:be:
         55:b4:bc:75:65:bb:cf:ca:b3:53:be:74:37:55:55:07:bc:41:
         ce:84:90:ac:e1:57:4c:ec:ec:16:5e:7f:17:8d:91:00:c2:e1:
         e2:e8:7c:32:41:74:e0:84:61:1f:f9:74:44:3b:64:bb:56:89:
         1a:bf:44:29:b1:a2:d4:e9:63:9c:25:5a:54:2d:19:14:c1:17:
         33:03:ac:f4:c7:8a:5e:ef:50:27:32:6a:64:99:1d:0d:9a:3c:
         59:f9:31:ac:08:c2:bb:f3:d3:31:6a:6e:f8:43:3f:08:eb:f2:
         c4:60:0c:86:0e:97:45:76:f6:23:58:4b:a1:d7:3b:01:64:83:
         0b:db:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----