Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File:                     XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier:          Whzc/hVrRjfiZtVhc33andBEReF+QJYQYvelGYC5TCA=
Subject key identifier:   84:42:EF:66:EF:6A:73:E1:1B:EE:B7:11:EF:1D:31:4D:E7:3F:95:5A
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer:       /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial:       01962F06D9FF99D962EAE584D603B081B3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: d1WBDSrIXrxXTpV26Bfriv2FpUWhUoKt1QZP7/8o0vg=)
                          2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:ff:99:d9:62:ea:e5:84:d6:03:b0:81:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=8442ef66ef6a73e11beeb711ef1d314de73f955a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:e5:eb:f5:6c:56:50:4d:99:37:67:24:46:
                    96:b9:e6:2a:b3:e3:e2:7c:d8:dd:cd:f0:f1:8a:3f:
                    92:76:7f:cd:ce:97:b6:2e:49:af:58:ba:ec:9a:a9:
                    b1:b4:69:62:e2:e2:2a:4d:b2:34:63:e7:fe:60:d9:
                    ba:68:3e:cb:a8:29:30:cd:6e:2d:6f:78:36:60:b8:
                    b4:bd:c1:08:49:26:36:cb:46:10:a0:49:9f:dd:fb:
                    a8:b4:00:e1:cd:3d:98:be:fb:d7:2f:02:e9:9f:63:
                    6a:bb:c9:a1:2c:4b:14:78:29:d0:2a:73:de:39:fd:
                    ac:31:94:74:3f:53:02:9b:f4:e4:59:5c:f1:79:2a:
                    11:b7:32:84:e1:16:0a:d6:0c:a3:9c:8c:1b:c6:08:
                    47:1e:9d:e9:27:12:63:42:e7:6d:fa:6b:79:df:87:
                    dc:22:c0:c0:64:96:08:9c:76:45:a4:00:37:20:c5:
                    c0:66:5b:c2:cb:80:5a:76:12:cc:a9:88:fc:45:8e:
                    d9:22:9f:5f:ed:9e:a5:e5:d9:a3:1f:3d:51:98:86:
                    ea:1a:64:84:e2:88:9c:74:56:d9:15:0b:6a:72:97:
                    7e:a9:b4:f5:8f:3a:c0:ce:4d:09:33:22:3a:54:09:
                    b6:02:b5:ab:5f:3e:7f:91:7e:4f:c1:aa:ca:0c:a6:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:42:EF:66:EF:6A:73:E1:1B:EE:B7:11:EF:1D:31:4D:E7:3F:95:5A
            X509v3 Authority Key Identifier:
                keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:66:c5:b9:e5:31:a6:0a:89:e7:79:71:48:e2:db:18:40:6c:
         21:a4:c0:71:65:c3:ac:9e:75:e9:0e:63:96:95:b8:79:03:1d:
         c9:41:bc:c7:0b:76:f6:d9:31:f3:58:7a:1b:9f:b8:f9:2b:03:
         ea:32:c7:fc:30:30:5e:17:1e:4a:b1:df:48:6b:11:f7:7e:e9:
         4b:f1:32:4c:75:ee:f5:23:1c:d3:0c:b5:88:5e:1c:fd:c2:3b:
         b7:77:77:26:71:c7:2e:01:9b:14:2e:01:39:7b:92:d9:df:82:
         9f:6a:04:52:1b:00:7a:a5:22:44:c6:e0:72:06:fb:cf:de:ec:
         f9:f4:8b:c1:62:57:95:28:07:12:2e:5d:29:aa:1d:50:ed:b5:
         cc:90:22:bd:21:a1:2d:ae:03:79:c8:71:90:96:4b:3d:eb:b5:
         28:53:15:b5:40:d5:b8:12:c2:50:be:69:4f:7e:8a:33:c3:0f:
         41:e6:09:ce:8d:08:72:df:9b:21:88:e2:b0:16:93:ad:27:14:
         6b:c6:dd:87:33:02:2f:21:4f:c8:7d:4f:82:bd:0e:5c:40:89:
         c0:fe:76:be:7b:3d:09:b2:b3:7e:2d:95:41:9d:f3:7e:18:37:
         27:17:04:10:7d:9b:c1:7e:20:1d:ab:3a:d7:18:21:a9:69:e6:
         c9:84:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----