Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          cLodUY+kG/KdXKS0RLK032E6hRMJEXFvC10MX95wc4Y=
Subject key identifier:   AC:52:90:E8:C6:51:D3:86:FD:6A:E2:32:95:31:94:79:42:13:BF:07
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       0195E00FDD88EB92722C3E12421E8ED49000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          0DC4
Signing time:             Sat 29 Mar 2025 04:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:30 +0000
Files and hashes:         1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
                          2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: 721RJjmHKm63dle79f4HXtPNKBzfypYzSlenlf75+cY=)
                          3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
                          4: NouaPvm_pxgnZaSsMDeuuZIRGjs.roa (hash: nYpFZsLrdwqDrsUOTj47eXoiORRIxveHjZpyk2lUbWs=)
                          5: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
                          6: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
                          7: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
                          8: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:dd:88:eb:92:72:2c:3e:12:42:1e:8e:d4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Mar 29 04:01:30 2025 GMT
            Not After : Mar 30 04:01:30 2025 GMT
        Subject: CN=ac5290e8c651d386fd6ae232953194794213bf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:04:5f:46:5b:c2:46:bb:57:28:bd:52:8f:
                    99:20:4a:8b:7b:50:70:cc:cc:78:cb:f4:7b:bf:06:
                    b0:b6:23:3b:9b:4f:dd:5b:b9:2c:6b:88:1e:20:81:
                    a1:49:63:5e:aa:2c:0d:df:a7:1b:be:ad:1d:18:f6:
                    ef:db:24:fe:1a:47:ce:d6:5f:78:4f:a4:20:27:02:
                    d6:53:c7:12:8b:86:6d:33:24:2b:c5:85:60:e2:a7:
                    33:16:ab:b8:d9:8c:e9:6d:33:0f:e5:89:eb:7b:1b:
                    88:45:e3:8f:ba:8c:98:e7:89:31:0c:11:5c:52:91:
                    3b:70:cb:77:68:5e:83:ab:8d:48:fd:f2:83:de:74:
                    f6:d3:dd:3d:2c:a1:70:cf:7b:c2:98:6c:03:23:93:
                    ef:69:00:38:a5:71:64:2a:3d:d4:14:0f:23:aa:eb:
                    3a:92:09:a8:e9:22:70:02:1f:f2:52:0e:c7:0c:0b:
                    02:1a:fe:d3:a9:eb:09:26:4f:60:73:f0:09:f4:9d:
                    07:a9:8c:ee:11:60:62:ac:d6:df:0e:d6:92:78:45:
                    b6:df:96:cc:5a:58:56:e4:dd:3c:f2:d8:a1:4d:4a:
                    1e:16:47:34:fe:18:10:12:ea:ff:0e:9e:16:93:c8:
                    97:88:29:77:0e:77:f4:5b:fc:fd:20:df:dc:8f:90:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:90:E8:C6:51:D3:86:FD:6A:E2:32:95:31:94:79:42:13:BF:07
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:65:76:06:24:d9:97:a1:fb:10:18:5a:e3:47:20:a9:d2:a3:
         e2:bd:a9:06:10:63:c0:a0:89:66:f8:74:9e:99:ec:a1:68:9d:
         b4:76:7f:d8:cf:50:6e:77:94:55:4f:30:33:7b:d9:43:d1:e5:
         dc:6a:46:4d:41:88:91:97:4d:5c:5c:7a:f4:74:3f:34:04:51:
         20:53:20:ca:ab:66:86:b8:40:4c:88:ae:1a:6d:01:2d:46:47:
         f5:72:3f:71:2b:0f:8c:2d:d5:35:94:de:04:fd:f0:98:16:bc:
         00:37:1d:15:7f:0c:f3:07:40:6f:14:df:e4:5d:86:2d:33:82:
         3e:8d:7f:12:f5:cd:d0:8e:32:74:d5:e5:e6:9f:45:9c:d9:fa:
         5d:12:95:69:a5:0e:61:39:20:ef:e0:37:84:18:be:6e:33:d1:
         e5:7a:1d:87:b4:04:bc:6a:d3:7c:83:cd:c0:0a:60:d0:21:04:
         0f:1e:ee:13:ae:de:60:67:47:11:c6:60:ce:8d:fd:b0:c5:2d:
         47:1d:ff:01:52:9e:ae:36:ae:c0:48:37:0e:f3:28:62:5c:b7:
         72:c0:9e:9c:cd:f8:41:13:da:02:94:e0:83:ee:2e:76:bf:82:
         48:83:1f:b6:03:49:66:dc:4b:ad:a0:6d:81:71:7e:34:7d:ec:
         92:97:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----