Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File:                     XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier:          wT8BtGBBB8L7uX1A7kJkojiUtdmiglpuxBGfQGkkRLw=
Subject key identifier:   EE:64:A1:E6:26:BB:59:AE:E5:E2:A1:33:B5:B0:3D:8F:B6:1F:6B:78
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer:       /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial:       01962F74897FFBDBC56C22AC1DCCF26A3695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: rtc0AzZDThZ66aU+32MwXzehaePBPM35FDlHbUCjy7c=)
                          2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:7f:fb:db:c5:6c:22:ac:1d:cc:f2:6a:36:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=ee64a1e626bb59aee5e2a133b5b03d8fb61f6b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:14:20:97:da:75:74:2b:94:60:f3:7e:ce:e0:
                    6b:80:d6:30:db:bd:e9:70:78:da:7a:b2:5c:a1:9e:
                    45:2d:fd:a7:61:f8:e4:60:65:7a:d7:10:f4:4e:15:
                    72:4d:8a:67:a8:99:7b:6d:ba:ab:5d:5c:93:39:f9:
                    d2:af:3c:3f:e4:5a:d0:c9:80:2c:ae:64:f5:2c:2f:
                    8b:47:4b:fd:3b:e6:03:3c:1b:83:c4:25:88:39:1f:
                    e2:63:bb:d7:98:5f:90:3f:f6:87:52:05:7a:9f:15:
                    26:9a:fb:08:42:ae:2e:ff:7e:19:ee:8c:7e:ca:c3:
                    ad:05:13:e2:db:38:25:fe:8c:ce:16:ec:ef:98:8f:
                    f7:b4:7c:00:a3:d3:54:3a:8b:31:4d:1d:e4:48:57:
                    98:90:b5:9f:10:1e:c4:5a:3f:be:99:a3:d3:69:5a:
                    73:e8:a2:f4:2b:e9:d0:82:ee:88:12:a0:4f:b5:41:
                    f2:4d:bc:4c:75:3c:52:fd:24:63:2b:cd:22:be:b6:
                    95:31:44:e5:aa:97:5a:60:cc:de:a0:f8:4e:bb:11:
                    86:4f:59:4a:c8:e4:48:e9:d5:36:e4:30:7c:77:56:
                    2e:6d:01:79:66:5e:27:59:ab:f0:41:be:ea:4f:b4:
                    4a:1c:0d:7e:c7:a6:8e:0e:c2:0c:59:ec:61:83:7f:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:64:A1:E6:26:BB:59:AE:E5:E2:A1:33:B5:B0:3D:8F:B6:1F:6B:78
            X509v3 Authority Key Identifier:
                keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:2f:15:17:9f:9b:2d:b2:d0:4f:23:8d:c0:98:3b:0a:d6:
         80:04:bd:f4:aa:a5:8e:fb:ad:e7:b2:26:cc:19:85:da:e5:62:
         cb:21:ed:17:3f:f1:8b:f7:4f:bc:03:cb:eb:4f:8b:9b:b6:cf:
         79:ab:9a:66:db:62:83:3c:1e:14:6d:bb:bd:f5:51:95:31:c5:
         42:78:69:58:3d:f3:df:57:16:f2:76:53:72:cd:1c:1f:be:a7:
         62:69:5b:db:1e:f9:a9:98:35:25:9b:b3:25:a3:d2:b8:1d:e0:
         b0:69:21:9c:db:ce:db:a8:93:29:93:e6:10:18:2a:88:88:48:
         59:6a:3b:dd:c2:87:e7:70:89:a6:21:78:6e:ed:c2:2c:1e:c3:
         38:62:e4:1c:f5:3b:66:81:fa:69:5f:f1:7b:36:d9:3e:97:6a:
         b4:33:e4:9b:38:a3:21:b8:4a:2f:4f:e9:f7:d2:b3:51:a6:64:
         49:7a:a9:67:10:53:15:ab:0d:07:61:13:98:19:eb:eb:3c:ec:
         68:56:d7:e5:53:e6:2e:7c:c8:7d:0a:3c:00:4a:dc:39:7e:5a:
         3c:84:55:26:aa:5d:fd:ec:a4:a4:0f:97:e6:4c:e3:60:ec:b0:
         cc:00:db:ba:57:cc:ff:53:ca:61:8b:ab:5d:fb:ce:62:e3:e5:
         88:45:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----