Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File:                     xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier:          4VDHJgRcG19O0+PReDfOl/UXEd4gZJplRCs+dCT8KAo=
Subject key identifier:   C0:B9:67:FC:F7:8B:33:46:CC:68:D5:CE:2A:89:50:1D:54:18:F4:FA
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer:       /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial:       01962E2AC858DF8E216C6783F8F6641031CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
                          2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
                          3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
                          4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: Ykcf9kDpuiDhlYSOz4yO+CdFlC2iu72G86E5303d7+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:58:df:8e:21:6c:67:83:f8:f6:64:10:31:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=c0b967fcf78b3346cc68d5ce2a89501d5418f4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:39:69:56:f4:ca:37:d0:12:7e:4c:d6:b3:
                    3e:d7:85:26:d7:12:da:1f:88:2b:9b:cc:30:a4:30:
                    83:ae:24:1a:18:df:80:2e:d7:19:8e:87:ac:a2:f9:
                    6d:41:a5:17:9b:97:d9:2d:8e:0e:0f:ec:c5:bb:2b:
                    45:67:da:fc:14:af:a1:9e:cf:f4:6b:eb:e8:91:1f:
                    88:85:fa:e9:13:c6:dc:64:ad:ae:ba:66:63:2c:bc:
                    f1:ea:76:c0:51:9c:6d:76:4b:25:d8:47:f0:ef:7c:
                    21:49:70:66:51:2e:b0:4a:42:f4:2b:87:4b:4a:e7:
                    be:4c:cd:35:85:e2:b6:c8:83:28:a7:8e:1f:9f:b2:
                    1c:de:e9:68:26:f4:a2:56:57:b4:e2:5f:a7:b3:12:
                    58:a0:fd:58:34:4b:c9:6e:f9:f1:89:69:b7:76:7c:
                    2e:22:be:30:f6:a1:85:fe:21:d3:c8:9a:6b:64:6b:
                    8a:c1:86:1b:cd:5f:f4:f9:ae:3c:09:30:1f:bd:ab:
                    87:9e:18:d9:f1:f5:38:ff:c1:d2:c9:c7:09:d9:b8:
                    1f:d4:da:54:6d:93:f6:62:fa:29:ee:de:f5:2a:b3:
                    62:df:27:6c:4d:a8:70:8c:d9:ec:f4:b4:86:97:b8:
                    a2:15:49:2c:1c:82:0f:c6:27:6a:7b:8c:26:bc:7e:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:67:FC:F7:8B:33:46:CC:68:D5:CE:2A:89:50:1D:54:18:F4:FA
            X509v3 Authority Key Identifier:
                keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:68:7f:39:db:ca:bb:99:48:08:8c:2c:f8:a6:eb:28:05:83:
         95:03:8d:42:d3:2c:ae:b7:85:da:e9:4d:08:6e:27:a7:f3:d9:
         b1:06:45:a4:84:8a:98:c6:a6:f3:51:94:54:08:30:b0:5e:b7:
         f8:43:d5:34:e4:64:1d:1f:b2:f2:a4:d3:8f:d3:09:fc:0d:2f:
         9a:7a:5f:85:45:cc:30:19:a5:a3:12:9f:8a:c7:bf:65:e7:90:
         0d:64:9c:66:03:3d:45:9e:31:b3:3e:23:04:76:33:5c:f3:a7:
         a9:fd:e4:e3:1f:f3:b4:75:52:5e:8e:a2:03:f3:86:ca:79:bd:
         9c:e5:e4:cf:0c:20:a0:b5:96:d4:a4:a8:99:ab:53:87:1e:25:
         19:1e:30:82:8e:31:bc:21:a2:cb:e7:42:9e:df:5a:03:b0:49:
         d3:8b:9b:cc:c1:a5:ef:2c:35:85:ce:12:4f:ca:f8:dc:bf:aa:
         3b:ca:5a:d5:b0:57:f6:24:44:a4:80:86:20:53:13:d3:38:44:
         07:f6:62:19:7b:d5:7b:ab:98:f1:4a:0b:9f:b8:01:5b:64:ee:
         25:91:0f:ba:9b:bc:40:a2:a5:28:4d:3f:62:58:0e:19:72:84:
         6f:74:08:5c:88:a5:bf:d8:12:ab:bf:75:c0:c5:9f:82:e3:7b:
         01:83:2e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----