Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File:                     XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier:          7nGk6Lza8BT9pSa31cH/t7dtpRWSuWUnR12ELCexhiY=
Subject key identifier:   88:A5:6F:5A:5D:37:60:6A:97:70:70:45:AB:F0:6C:02:D7:21:E7:81
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer:       /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial:       01962E99B2AC6093C8CB26EAD76F36FB0108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number:          0FF9
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: QGKSiFavp9LMElSoLZBhqzLqFMM.roa (hash: ip/2uYmlI+BKnaF8k1mqNHwsPmNtHEQrk8aTeSCdMUA=)
                          2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: YxFZd37XpUn1XSWtsRIhtexlB/Zw4OAATKQYtWUVSWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b2:ac:60:93:c8:cb:26:ea:d7:6f:36:fb:01:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=88a56f5a5d37606a97707045abf06c02d721e781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:91:09:87:fe:0e:66:63:3c:8e:47:1a:9d:
                    02:b6:f1:e9:86:33:48:23:d9:8b:82:3f:29:15:12:
                    b5:6b:60:ab:c4:3b:9b:8f:55:13:3a:d4:42:27:96:
                    8f:f8:13:26:af:fe:25:49:6b:88:1d:5d:03:f5:31:
                    f8:05:b8:00:c5:4e:c0:4b:64:08:9f:1a:a5:a0:11:
                    fb:09:f2:c6:14:d8:62:93:fc:4e:16:9c:5d:cc:37:
                    b2:42:0c:43:b1:44:0f:ed:7f:47:0d:3a:30:35:14:
                    13:7e:56:b9:cb:be:e8:17:2c:80:7d:97:d7:1d:c9:
                    69:83:fe:7c:42:fc:0a:52:3d:aa:57:bf:0a:f6:f7:
                    4e:5c:43:46:cf:11:bf:76:fd:44:69:f1:f7:6f:78:
                    2b:28:07:8b:9c:a6:e7:ab:85:71:05:92:90:60:0d:
                    11:0b:fa:9c:00:8d:1f:04:b0:eb:93:6c:2f:93:a1:
                    7d:e5:42:a2:a5:93:c9:e6:75:ce:cf:98:ce:93:2c:
                    9f:7e:81:ba:0c:4d:96:ed:3b:8a:b9:24:0c:c0:32:
                    38:dd:03:d7:5e:d3:79:49:4f:81:c3:d2:8a:b6:01:
                    3c:15:ea:70:f4:13:6e:75:50:43:d7:d7:8a:a6:ac:
                    db:ff:0e:e3:0f:8c:7f:e5:fc:fc:e6:d2:2c:07:58:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:6F:5A:5D:37:60:6A:97:70:70:45:AB:F0:6C:02:D7:21:E7:81
            X509v3 Authority Key Identifier:
                keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:47:81:1b:73:f0:70:20:b5:56:db:7a:50:80:17:e7:03:
         2e:d6:a4:64:c1:06:e4:b3:33:ed:d4:c1:cd:bd:8e:ec:54:26:
         7d:3a:c4:a9:83:a3:e9:3c:ba:89:96:36:a0:90:ee:77:51:89:
         d9:ca:b3:74:62:7a:ea:8f:9d:46:2a:5d:d7:41:ce:52:62:4c:
         bb:ba:37:b9:98:1c:1c:af:eb:4e:bf:ea:fa:a0:3d:c5:eb:75:
         b6:2d:6f:b9:96:15:f2:85:80:1b:4b:a2:0c:70:0d:62:1e:f0:
         3b:0f:d7:f9:e6:4f:02:7e:7f:5d:d8:6f:e4:8d:98:59:40:9e:
         b5:fb:c4:9c:a0:69:0b:a8:af:f3:53:de:69:27:71:1d:64:cf:
         19:c5:73:a0:68:a9:76:84:e5:57:99:ae:b7:82:1f:c3:67:38:
         e5:18:d9:b1:f3:25:ca:8f:80:38:73:22:08:e7:0d:a7:21:a1:
         94:0c:82:3e:9e:07:97:0f:20:70:8e:65:46:78:5d:00:ff:d0:
         cc:60:29:4d:b6:b6:8d:c2:bd:9a:5b:6b:4b:6e:16:b6:ae:f4:
         2e:a4:8b:e9:f4:2e:cc:66:e8:c3:7a:27:d8:bf:a9:73:ab:8d:
         c6:7b:f4:78:03:78:ef:6c:e0:d3:bb:a9:32:85:45:b3:1b:68:
         d4:a6:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----