Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File:                     XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier:          zbsDDvwc3Tp94oShn6LuUGVse7tItIN7aN5gQlaaQLU=
Subject key identifier:   DA:66:B3:AB:F4:B8:0F:50:BF:1A:27:42:6B:2C:F5:11:6C:9F:37:9E
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer:       /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial:       01962FAB5B459F51575CB5D96A291C4BE493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
                          2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: 1UpBN0iGBaIlF3sgp8A38k1P73cecJLw1bp/hIZEpiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:45:9f:51:57:5c:b5:d9:6a:29:1c:4b:e4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=da66b3abf4b80f50bf1a27426b2cf5116c9f379e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:44:6e:91:71:4a:10:99:1f:68:e6:7a:dd:
                    3b:45:8a:b7:38:75:c1:8a:2e:4f:e2:f3:c6:7e:c7:
                    d0:b5:2a:0a:b0:7f:77:5a:71:de:38:5d:2e:16:a4:
                    fa:45:30:21:e8:ba:71:e5:e6:cc:6f:b8:e5:e4:ee:
                    56:97:66:60:16:4e:55:d4:6b:d4:49:96:fa:1b:ae:
                    dc:a9:6f:ed:d2:0d:45:69:2c:6e:25:8e:c0:1c:64:
                    a3:c1:06:74:78:cb:78:d5:0d:c3:48:b0:b1:f5:4d:
                    75:e8:d7:ef:65:de:ec:b6:f2:37:bd:de:a5:c6:2f:
                    72:20:0e:db:7b:8e:ba:ac:c6:3e:47:69:04:1c:91:
                    20:b8:0d:55:1e:f1:9a:c0:32:c7:af:2e:ef:33:7c:
                    1c:a5:d8:7b:99:ec:de:b8:b6:f9:fe:1c:38:8f:e2:
                    ea:b9:07:e6:6b:97:0d:2f:1e:e3:59:d6:c1:ad:27:
                    c2:b3:88:7d:3c:87:bd:55:5f:d2:27:d7:50:b2:02:
                    1e:9f:48:8c:66:52:55:1a:71:4b:09:79:e5:8f:79:
                    68:e5:69:96:e2:75:3c:71:ce:63:ee:26:e1:e1:bc:
                    e6:ac:3c:09:49:29:be:1d:87:eb:e4:f8:27:fc:e2:
                    4b:af:c6:ca:fa:41:ee:d4:05:10:f2:4e:a7:04:ab:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:B3:AB:F4:B8:0F:50:BF:1A:27:42:6B:2C:F5:11:6C:9F:37:9E
            X509v3 Authority Key Identifier:
                keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:e1:4d:82:c1:49:bd:7b:de:89:cb:eb:cc:b6:8d:91:25:
         29:d1:f9:f7:36:22:df:3b:c2:e7:df:49:c3:39:67:ee:ce:0d:
         86:bd:4a:85:32:3d:5c:9b:96:db:70:78:62:1a:d3:87:8a:72:
         88:03:9e:07:5b:ba:1a:21:37:5e:cc:65:22:70:64:f3:4f:ec:
         5d:4a:6b:41:58:12:d0:38:7a:2e:a3:6e:c7:1a:63:21:04:a0:
         46:28:5e:c5:46:a9:03:6b:2d:8d:09:08:f0:3d:96:2e:f4:81:
         bc:91:9f:bb:c4:2c:4f:a4:bf:14:63:af:68:b7:d4:91:7e:8e:
         0a:36:5e:2f:26:96:a0:4d:05:63:34:3d:37:bb:7f:4e:c9:fc:
         ef:2f:3e:8f:8e:98:38:63:94:d5:9f:95:2d:56:45:f2:82:67:
         aa:29:ad:12:15:bf:11:1b:76:8e:d8:8d:2c:07:6c:89:39:de:
         cd:ad:e8:c3:6d:9a:c3:37:23:a8:29:97:81:ba:11:b9:39:bd:
         c4:c0:31:27:17:31:0d:ec:4b:ac:8e:6d:f1:35:50:c7:5a:00:
         f6:35:01:65:d3:01:b7:ea:98:25:3c:03:af:7f:18:b2:40:18:
         3a:1c:f8:9b:8b:2e:28:81:69:07:bd:5c:a8:0e:1d:c4:fc:43:
         ed:39:0e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----