Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File:                     xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier:          JxLmUv+01v4Ca1iRd9LVxWyno90tQUDg/OiR1Oa0kNY=
Subject key identifier:   67:C2:2B:B4:EF:D3:97:8D:BA:48:8A:21:41:AF:02:D4:30:BA:E2:85
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer:       /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial:       01962E2AD94FD02B8EC4455D62A204D18C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number:          0E0F
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
                          2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: oxTPrk0hebWZKvP8Z3Pca4XLZVpSBsrTz/pFqNSTvCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d9:4f:d0:2b:8e:c4:45:5d:62:a2:04:d1:8c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=67c22bb4efd3978dba488a2141af02d430bae285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:da:59:7c:5b:8d:aa:f3:58:71:0a:ae:af:
                    2a:c6:9c:5b:5f:40:34:56:37:85:58:58:3a:b1:b4:
                    a7:84:6c:31:ae:17:8b:38:d9:4b:85:1b:fc:cd:78:
                    02:49:d1:27:4f:7a:e8:b9:b4:be:44:3f:07:2b:6c:
                    de:df:1b:f5:ad:a0:b6:13:d5:7d:54:95:d9:99:07:
                    90:de:9d:19:a9:7b:cd:5e:81:1e:7f:41:64:2e:22:
                    67:ba:9f:a8:c0:e8:94:d5:00:44:68:ab:8d:ec:6c:
                    e0:e1:af:7a:2c:55:21:99:56:81:1c:dd:67:05:89:
                    1c:48:9e:e9:e7:7c:a6:ab:9e:27:7a:f8:f9:62:c0:
                    7c:8a:60:58:60:86:07:54:01:a4:9b:65:41:48:f0:
                    df:2c:33:c6:d6:25:3e:a1:ff:55:03:8e:fa:38:d7:
                    11:9a:ee:21:25:64:ab:0a:b4:69:94:0a:ae:73:b8:
                    17:2a:96:a1:01:4e:73:4d:d3:89:28:2c:5a:5f:21:
                    b4:cf:40:52:e4:51:43:41:9f:ee:5a:81:c9:11:b3:
                    8d:0f:d1:eb:9f:94:5f:1a:18:4e:58:65:b0:20:a8:
                    e1:62:ee:02:7f:23:09:01:c9:db:30:72:44:1f:8b:
                    74:b6:4b:0b:9f:d3:dc:f1:35:3a:05:50:1a:aa:1d:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C2:2B:B4:EF:D3:97:8D:BA:48:8A:21:41:AF:02:D4:30:BA:E2:85
            X509v3 Authority Key Identifier:
                keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:5b:6f:ca:39:d6:52:72:cd:bf:e4:8e:d4:bc:b2:ea:f0:
         4c:07:55:02:34:ad:63:70:74:3b:11:f5:1c:3e:92:1a:4a:18:
         49:ea:49:15:f4:e9:9a:23:de:99:9f:17:74:00:fb:ff:b7:68:
         d0:f3:6f:15:58:6f:18:54:ab:81:cc:90:c2:26:d8:2c:86:2f:
         c9:ef:b7:e2:37:83:d4:f5:d2:ee:26:87:45:9b:33:03:e0:c3:
         87:2d:b1:12:af:56:bc:d8:02:d6:15:3f:fb:46:17:04:ef:3a:
         12:36:c2:ea:f5:4b:34:e9:8e:15:35:8a:f0:42:f9:fa:d1:0c:
         e0:29:cf:f8:db:65:dc:12:34:70:3c:54:85:88:9f:39:26:5c:
         d5:b9:22:2f:53:c2:8c:fa:e4:f1:b0:d4:cb:99:51:90:a5:bd:
         33:4e:5e:27:6c:42:80:d9:88:14:4c:c5:cd:41:a6:40:64:89:
         9b:72:5e:43:af:27:dd:9e:12:2f:b5:b0:13:e4:44:1d:d7:66:
         22:ba:7c:57:5c:07:e0:e4:38:b3:39:2e:8b:db:b6:eb:d1:35:
         05:2d:c9:45:e8:1e:92:14:4d:73:68:cc:24:d4:a8:b7:7c:b5:
         76:34:94:59:d0:af:2f:b3:f2:0f:60:b3:13:d5:cc:12:bd:b0:
         f6:a1:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----