Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File:                     XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier:          1jyCk4pGuATvCesqba0UWaUINTRjuKuHf+Q10A0I86g=
Subject key identifier:   67:7C:87:B6:77:BA:79:FE:C1:02:B5:BE:08:0A:93:00:E7:1F:23:80
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer:       /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial:       01962E9974D703C9CBC0CC580702F5016FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
                          2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: CoTCXqBfFQ4FGdQxTiflcYKzNUtZ3JC5fOv49hwX3gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:d7:03:c9:cb:c0:cc:58:07:02:f5:01:6f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=677c87b677ba79fec102b5be080a9300e71f2380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:f5:b0:9f:57:47:d9:a8:3e:4f:23:22:ad:
                    bd:2e:e6:4b:7c:4e:63:fa:c9:a2:19:8d:49:d3:22:
                    a0:bb:d3:42:20:63:61:78:8f:b6:2f:f3:9c:cb:69:
                    95:c3:89:e0:b3:1a:4d:8d:20:aa:16:60:4a:a5:e2:
                    8a:6a:ac:24:09:25:66:10:25:03:cf:66:e7:7a:50:
                    eb:07:98:c6:ce:00:96:6b:59:25:97:fe:83:5c:1c:
                    91:06:7b:6a:b8:b5:33:ab:21:ba:fe:85:ed:76:db:
                    48:66:5a:49:bc:8b:e6:b1:92:ef:25:8b:8f:90:66:
                    5f:d8:83:d3:f8:5d:5d:b8:0c:07:43:27:14:10:cd:
                    3d:5e:8b:e9:07:f0:34:df:60:07:e5:7b:42:78:2b:
                    db:e3:87:4a:78:54:b3:a2:4a:27:16:ea:70:b5:38:
                    90:ca:b3:68:09:5e:57:81:99:98:13:ec:84:72:69:
                    89:2d:96:7b:2c:5c:e4:4f:25:79:a9:6f:84:ca:1a:
                    be:5e:89:58:bb:04:96:7b:79:20:14:7e:38:11:6b:
                    61:dc:f1:6e:45:e1:8b:9a:1a:d1:dd:c8:2e:a0:6a:
                    a3:4d:8d:3e:47:f3:07:6a:3f:7d:e3:17:f4:a0:5d:
                    09:b2:67:91:1e:77:3a:17:28:39:a2:62:63:ad:57:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:87:B6:77:BA:79:FE:C1:02:B5:BE:08:0A:93:00:E7:1F:23:80
            X509v3 Authority Key Identifier:
                keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:45:2f:12:20:a1:bc:72:e2:99:30:e6:bd:95:f0:d9:fe:f3:
         74:0e:a4:4b:f7:10:4a:0a:c3:e6:2f:e0:fe:20:64:c6:bf:16:
         97:65:c3:6a:ee:a9:f7:33:5b:59:ef:77:72:96:e4:62:b2:0e:
         e3:f5:3a:f6:65:e6:a5:cc:2c:56:1a:c9:bf:50:06:4d:59:1a:
         9f:b2:18:c7:04:d9:4e:cc:cc:83:d3:18:15:d6:ca:df:5e:bb:
         12:49:86:ff:40:0d:83:30:f9:da:e0:34:84:a2:58:55:6c:63:
         81:b7:73:6c:1a:e4:dc:3c:7c:b4:ad:bb:19:3d:77:cb:e4:be:
         e3:70:4a:6a:9c:f6:fa:8f:59:04:fa:cb:f1:9e:27:6c:a4:c7:
         38:b3:50:54:41:8d:73:6c:a2:e3:eb:11:3a:d2:b6:be:bf:3f:
         e3:94:65:ca:08:eb:7b:07:c2:f3:d7:d9:35:65:bc:42:ed:1e:
         eb:c4:b6:34:c2:39:e2:d1:6a:71:91:1d:90:80:83:b0:d9:9f:
         ec:36:63:58:e0:a9:03:fc:42:1d:eb:62:35:a5:52:18:f7:37:
         cb:49:a2:39:45:57:f7:3c:f8:02:9c:ea:44:16:82:33:fe:cf:
         78:39:c1:6b:56:d8:b3:64:7d:3d:76:06:72:59:f1:cd:40:3d:
         b9:d1:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----