Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File:                     XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier:          7fvnsgOSrloJbshLUoWsagro4sbTvSIAbdTiV6s4HlM=
Subject key identifier:   2E:AC:3F:30:16:DE:4B:4D:C4:19:11:14:D0:6E:58:5C:FA:E3:0E:6E
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer:       /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial:       01962E2B1F1B1CCF7069B0BF378EA39875D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
                          2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: WaIyqtu/e7QA9DjQber+NYfGkundMBhPHeD6GJ5a5Kg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:1b:1c:cf:70:69:b0:bf:37:8e:a3:98:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=2eac3f3016de4b4dc4191114d06e585cfae30e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:be:30:97:66:af:a9:7f:60:12:3c:4c:6b:
                    bb:d6:92:1a:98:d3:dd:3b:e9:02:8f:b0:13:65:13:
                    75:7c:98:a6:b1:6d:75:f7:3b:36:cd:14:93:de:01:
                    18:eb:68:3c:b7:96:3f:f1:de:1e:1e:88:91:f3:d1:
                    2a:c1:4c:51:dd:10:38:63:72:8b:6c:8d:be:46:f0:
                    d5:b3:48:53:8a:b6:fa:f3:3f:9a:41:83:b2:a0:a8:
                    86:37:90:b9:4c:77:b4:14:f4:b6:c1:00:f6:28:17:
                    c0:5e:16:04:54:b1:c0:9c:22:95:ba:0a:9d:54:00:
                    e2:5c:46:85:db:75:8e:1d:b2:a7:c6:12:be:c4:e2:
                    71:b2:01:0f:1f:cf:58:44:98:c7:51:04:95:a5:a2:
                    d1:5f:79:b0:82:df:27:a2:6c:18:da:1c:5e:7f:df:
                    ee:2f:47:95:26:67:f6:10:ae:be:97:c7:4f:12:1e:
                    90:95:2b:96:de:d6:f5:b3:ed:8e:ee:48:d3:9f:ea:
                    49:22:80:61:66:f1:cf:cc:e6:4c:2d:66:47:d7:5c:
                    fd:98:7b:7f:4e:96:f9:50:35:d8:55:85:fe:65:db:
                    ee:c7:10:9d:de:db:ff:a3:d7:c6:5e:a9:bf:9c:e5:
                    46:7f:c2:8b:c4:78:f0:f8:f9:f5:08:41:42:7e:a8:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AC:3F:30:16:DE:4B:4D:C4:19:11:14:D0:6E:58:5C:FA:E3:0E:6E
            X509v3 Authority Key Identifier:
                keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e0:e8:6e:90:4a:3e:62:96:ec:70:7f:1b:e4:66:15:e2:a4:
         94:91:53:35:65:db:7f:28:9d:a9:13:2b:78:8d:63:a9:11:45:
         86:1f:f4:85:37:2f:e7:97:89:2f:c1:1e:b4:3f:32:73:11:0a:
         27:24:60:b8:48:6e:f1:c6:68:f5:a0:c5:6a:5c:39:94:2e:9b:
         af:8c:d9:3f:be:e7:79:53:92:30:32:93:54:c2:c4:64:b8:ec:
         a0:31:6d:db:4b:74:0d:17:e6:8d:a9:ee:11:7c:76:71:ec:14:
         aa:54:1b:0c:ea:3f:7f:2c:b8:3b:8e:c7:d2:3e:46:09:8a:53:
         23:7b:24:8e:63:f0:74:73:59:92:30:65:35:a5:90:00:db:12:
         78:a2:d1:b4:39:e3:47:66:82:af:f8:ea:dc:da:8d:d8:cd:57:
         06:d8:40:f4:81:ee:71:b2:0b:63:4b:54:91:67:eb:89:c3:79:
         72:20:50:9a:be:74:cc:07:2d:36:ff:2e:03:33:5a:05:47:2d:
         7b:49:64:08:53:d1:50:2b:d6:eb:01:0f:f9:aa:fa:7f:45:39:
         8e:f7:89:4e:f1:88:9a:52:da:42:15:a9:9e:02:fd:57:a0:06:
         2b:c6:de:6e:bc:36:96:56:3b:2b:c5:6b:2d:2e:20:fc:42:4b:
         fa:0a:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----