Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File:                     xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier:          qByGQWtSR9urd7NItaBG4S8x8nl+TXyASzg5IzQVjR4=
Subject key identifier:   BC:02:4A:B1:B7:D3:C4:D1:75:14:3D:13:99:52:26:69:72:72:0B:2E
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer:       /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial:       01962E2B0056FDEBBB7A624B49260CDA0D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
                          2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: L+P1KOUO4vMOml3iYIWtDeuukv96Y4MR/keCFworDQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:56:fd:eb:bb:7a:62:4b:49:26:0c:da:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=bc024ab1b7d3c4d175143d139952266972720b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:74:5f:95:6f:0e:cd:7d:cf:12:60:84:50:
                    ac:5a:84:07:8c:73:6f:a2:b2:ab:47:45:26:55:82:
                    69:5e:56:ba:aa:d9:1c:1b:6c:0e:44:c1:06:81:14:
                    bd:2b:e1:70:fd:44:ce:10:59:6e:bf:20:a1:5d:f5:
                    28:c7:fa:de:8d:17:0e:9e:7b:e6:d6:19:8d:58:ca:
                    a7:e6:db:18:42:67:a4:b1:08:bf:5b:20:96:5e:28:
                    20:0e:40:15:e7:db:dd:af:f4:46:c5:22:c2:1a:f7:
                    ca:0b:dd:60:2f:8a:95:33:d9:59:c4:7f:00:a9:0d:
                    76:22:fd:6f:ef:64:e3:94:95:65:5f:1e:54:d3:72:
                    57:2e:bd:53:66:ca:db:d8:50:95:23:29:c7:d4:53:
                    5a:2a:44:a8:82:c2:02:dd:fa:af:a7:4c:fa:be:80:
                    fe:0e:00:51:5c:5e:97:ca:ed:cf:08:d5:25:32:4a:
                    f7:a3:ad:fc:9e:3c:04:a3:c9:8f:e7:79:aa:82:62:
                    4e:9e:2a:ae:76:16:92:31:f7:fd:39:9a:23:f2:53:
                    54:55:bd:7d:ed:ba:84:14:bd:df:06:fb:96:5e:a4:
                    4e:0d:08:a9:5e:fd:70:1c:50:67:c7:10:85:87:8b:
                    7c:d2:37:33:d9:ef:e8:55:b6:74:57:06:6e:31:45:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:4A:B1:B7:D3:C4:D1:75:14:3D:13:99:52:26:69:72:72:0B:2E
            X509v3 Authority Key Identifier:
                keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:ec:4c:e3:c6:6e:f8:48:03:cd:f5:4e:c4:7e:57:93:10:
         e3:ba:c3:fc:3d:c7:be:91:ca:95:e2:b8:b3:6b:16:a9:86:06:
         99:3f:05:12:4f:b3:8b:a0:ea:a1:38:2a:e7:cd:68:2f:0f:51:
         73:b8:77:4b:00:e3:a4:ed:87:40:ea:84:38:bf:c9:ad:32:99:
         68:3e:2a:da:b1:bf:0a:60:dd:8e:58:6a:74:ff:af:33:fa:25:
         eb:d2:db:c1:5f:d6:e7:91:51:5b:34:92:9b:b0:a3:4f:49:5d:
         44:fc:88:84:36:f7:37:98:f8:f8:bf:47:d7:93:00:ad:f3:51:
         68:95:0a:75:b7:95:ce:c4:20:02:eb:97:5e:42:59:e0:4f:43:
         3b:ad:ff:2c:19:37:1b:d9:ad:61:b2:22:21:32:ff:94:07:90:
         34:0f:59:75:dc:4d:3a:97:e8:80:48:a0:b6:48:14:a7:7c:07:
         80:e2:22:40:d2:a8:3b:23:f5:71:01:57:33:5e:ab:55:89:6f:
         4f:b4:e9:6d:80:10:75:c6:bc:c2:52:0d:73:5a:63:6f:0f:78:
         3b:f8:d6:bd:6c:fb:ce:99:dc:9f:80:e8:85:90:a0:ae:c7:86:
         b7:01:ad:95:84:00:55:37:a5:54:23:ae:24:07:8b:a4:ab:24:
         2b:14:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----