Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File:                     XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier:          H8QS5Afuiwhbl96/dQ8JLzXX6onxCuGIZHu6pkFGduI=
Subject key identifier:   68:65:B7:DE:09:6B:AE:EE:87:D9:7A:91:46:B9:97:11:12:62:81:33
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer:       /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial:       01962F06EE1D07EE81D790107A8F41F6281A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number:          03C5
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 0Qxf8BiMkAgDdKSfKwiEqluZDnA.roa (hash: H2LtKuGh5JchXV8W58yWszXP9g6XxzZIku1Ogk97V+Y=)
                          2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: u2T6Lo3VNlWbOQxO/ZIrHujmDBm1WLA4I5gmxXo78Ak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ee:1d:07:ee:81:d7:90:10:7a:8f:41:f6:28:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=6865b7de096baeee87d97a9146b9971112628133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:44:27:8e:dc:6c:91:21:c4:9f:df:7e:60:
                    c4:c6:84:87:6e:c0:be:a2:f1:64:4a:72:ab:cc:01:
                    4c:d8:13:b2:ac:ea:93:ae:e7:69:5f:c9:c3:a4:c4:
                    9c:3d:bc:c9:75:33:8b:e9:e9:a0:98:4c:71:95:21:
                    c5:c3:bb:56:e4:ef:76:b4:ab:0c:4d:85:c1:2e:e9:
                    c2:83:8b:1b:1c:dc:b0:c4:0e:a2:bb:72:34:ed:55:
                    56:72:bc:04:8c:fb:20:c1:60:55:d3:e0:cf:79:0b:
                    c3:91:1c:cd:f9:60:4f:92:6c:ff:83:1a:eb:b0:db:
                    d1:ca:cd:68:24:0a:25:b6:2d:4a:e7:17:e7:9c:49:
                    f9:7a:e5:84:b8:bd:68:3d:3d:15:c2:d2:f1:7d:9a:
                    46:c7:d4:f4:39:ad:2e:c5:74:23:67:ee:b8:2d:58:
                    18:f9:98:59:ee:6c:8c:f5:93:49:b2:25:33:61:4e:
                    f1:85:43:8e:61:49:ea:09:67:99:14:70:3a:aa:f2:
                    32:22:e3:2e:2f:e7:a8:43:78:fe:75:70:3f:28:62:
                    f2:5b:35:55:84:01:cb:d3:04:06:ef:16:7a:0c:96:
                    d2:fb:64:90:0a:77:be:47:f5:bf:fd:ed:c6:f1:01:
                    31:82:3f:e2:e8:1c:04:01:97:fe:9e:75:aa:9c:b7:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:B7:DE:09:6B:AE:EE:87:D9:7A:91:46:B9:97:11:12:62:81:33
            X509v3 Authority Key Identifier:
                keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:23:d4:00:eb:fa:90:96:3d:e8:f7:6a:ea:32:c1:38:8e:46:
         4b:b6:71:ff:31:34:55:3c:f3:a5:d4:6e:63:0a:8a:12:12:b4:
         60:92:76:fa:8c:c4:7b:df:65:6a:d5:b0:82:4f:d3:ec:95:09:
         7a:c0:fa:81:d3:85:7e:03:51:90:9a:4b:5c:11:05:4c:5b:6d:
         67:f4:e9:63:a0:8c:7d:03:85:c4:1a:0d:50:07:da:0b:68:f3:
         3a:53:92:04:81:cf:1f:cd:5f:01:1c:d9:a9:10:69:db:aa:aa:
         44:20:2e:49:f0:68:ae:e1:10:5b:14:89:4b:74:d0:66:d8:5f:
         51:4b:9f:7e:56:18:72:b5:52:b3:1c:41:08:a6:59:29:f9:4e:
         54:19:26:48:af:96:10:d0:a7:83:7f:55:fb:dc:4a:e3:95:dd:
         4c:60:06:00:06:6d:8c:dc:a8:7a:37:33:83:91:9f:3e:27:3b:
         bb:00:f7:8b:16:da:87:71:5c:2a:45:c4:e9:78:75:a5:89:37:
         66:f1:15:f7:4c:11:09:5b:a4:fe:38:a9:8d:cc:21:7f:c8:08:
         47:af:30:f5:37:7e:16:c5:00:ea:87:8f:a3:3d:89:b3:f3:d4:
         99:dc:5e:01:7a:1c:f3:2d:1e:b5:ea:3e:60:cd:42:54:df:e1:
         a3:f8:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----