Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File:                     XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier:          VtYH34abLvyTPBC7R3pPPf/9jeLPGmRxtnYLzdcUBiQ=
Subject key identifier:   DC:A1:06:ED:0E:36:7D:27:3A:86:05:4D:D4:1A:98:F5:9B:08:15:CF
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer:       /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial:       01962F0742A7770D37E2DF4B86CD571DFAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number:          0506
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
                          2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: zSDnrH5WMQFxNTrLshK+IUgR50EpII4RBC2wPXM1re0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:a7:77:0d:37:e2:df:4b:86:cd:57:1d:fa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=dca106ed0e367d273a86054dd41a98f59b0815cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:a6:27:cf:91:61:44:c5:9a:a8:1a:09:e0:
                    7c:38:5c:26:5d:d7:87:41:e1:c6:43:9c:14:67:34:
                    2c:63:9d:7e:d9:bc:51:db:08:08:f1:41:19:75:34:
                    b6:cf:bf:68:b9:d3:7b:dc:41:9c:96:2a:78:1d:92:
                    06:87:0d:1b:ee:81:e0:73:e7:46:03:24:de:ae:bc:
                    29:ed:a5:73:33:15:57:07:b4:07:29:37:27:29:2c:
                    25:73:b7:ee:84:3b:a7:b3:13:06:fe:61:47:ec:ea:
                    fb:68:5e:d6:ab:6a:59:85:e6:4e:55:bb:8d:9d:09:
                    96:e2:3d:79:71:26:da:9a:c7:7c:b6:9b:8e:b5:29:
                    52:3d:7c:1b:15:91:4b:81:ba:19:ec:b0:76:d4:1f:
                    09:2e:0b:22:f9:f7:2f:76:5b:e9:25:2c:f7:75:ec:
                    a3:d7:3e:18:cc:e0:b3:f5:d9:c5:f2:ac:7f:2a:66:
                    ff:39:bc:38:3a:30:96:01:2c:45:fa:b1:c8:8d:83:
                    4a:5c:58:0b:97:8e:27:fb:35:80:ad:8f:30:43:32:
                    31:06:73:00:b2:c5:fb:61:c6:97:db:57:f7:da:7d:
                    18:0d:d1:1e:f2:c2:98:5c:fe:c7:99:a4:ce:4c:c5:
                    d5:08:bb:48:2d:77:4a:1f:9c:bb:db:8f:d1:39:dc:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A1:06:ED:0E:36:7D:27:3A:86:05:4D:D4:1A:98:F5:9B:08:15:CF
            X509v3 Authority Key Identifier:
                keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:67:70:c1:bc:82:a2:0b:30:f4:43:cd:22:47:5f:16:24:26:
         fe:a1:f0:1b:5c:7d:de:84:8b:db:42:bd:b4:a8:b3:c1:73:98:
         20:e5:4d:f7:cf:ca:78:c0:83:b4:77:8b:1e:fa:f6:c0:22:c0:
         fd:c0:65:06:8e:94:38:c6:e8:bf:eb:cc:f6:cf:c7:5f:80:32:
         46:0c:cd:81:0d:9a:17:ce:58:02:e1:89:e8:ac:66:eb:06:a8:
         d5:ff:e0:35:8c:3a:74:7e:f3:08:61:40:65:64:0e:98:25:c0:
         0f:67:af:0c:39:a4:4e:a6:de:83:1d:b8:c6:89:c9:14:20:d3:
         af:3c:4e:cf:83:1d:11:91:90:b0:2d:c2:11:76:7e:30:95:60:
         39:c6:3f:b2:01:a0:d8:d9:db:7e:1a:fb:f3:82:2b:43:75:7c:
         29:12:c5:61:7b:9d:86:43:36:9d:cd:b8:c7:3b:e7:c2:a7:9f:
         e0:ce:0a:2f:d0:08:74:a0:ed:a6:f8:1b:21:99:69:4c:8c:a1:
         b1:d9:b0:5f:c7:64:91:81:9e:73:3d:2e:a5:ec:83:7c:c3:e8:
         cd:8b:30:6c:23:f7:1c:35:91:35:c9:27:58:d9:ae:6d:bb:13:
         d6:0e:b4:cf:4c:73:6d:00:27:9d:b7:11:64:d8:f6:15:05:11:
         2a:7a:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----