Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File:                     xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier:          R4PjPZS1GGMTd0DWXLmhiqqAYTssNVpfvg3tziy6Xzs=
Subject key identifier:   96:80:CF:CD:3D:B7:25:E8:E5:E0:B0:73:69:A3:E8:9D:58:29:2B:E9
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer:       /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial:       01962F068A064D21CB2C48845CCDCABC55D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
                          2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: DLZOM3vUameQn7ttJuOIkidC5SNCU7OF3GmaOh2YVa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:06:4d:21:cb:2c:48:84:5c:cd:ca:bc:55:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=9680cfcd3db725e8e5e0b07369a3e89d58292be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:36:9a:21:38:af:68:48:dd:94:97:7d:b4:
                    e0:27:09:5e:3d:5d:4b:58:98:f5:9a:72:19:cf:20:
                    44:a6:74:c5:2d:08:72:a8:b5:f3:f9:09:48:ce:cf:
                    fe:21:d5:a2:27:78:1a:f4:64:ff:ff:37:e6:93:69:
                    c7:6f:8c:f3:f7:6f:4d:e8:5d:b2:de:85:f0:79:06:
                    9f:20:2e:44:7c:32:fe:9f:d6:ae:fe:ec:3e:45:34:
                    13:7e:ff:f2:6a:f0:83:20:a0:14:ad:5f:0a:d9:ce:
                    79:1a:02:7e:ca:af:8f:42:bd:24:07:69:39:dc:db:
                    dc:7b:5d:f5:e8:aa:a2:a6:11:bb:8c:13:9d:df:4e:
                    4e:5f:82:c9:70:55:e7:15:13:c7:41:08:13:bb:e0:
                    e8:6e:b4:66:f8:b9:d2:68:81:c8:5a:1c:06:78:0b:
                    e3:1d:fe:1b:91:51:fb:b2:63:4b:ab:8f:39:53:19:
                    b5:a5:be:9d:e0:7d:68:88:e3:2a:fe:30:93:82:a9:
                    73:42:27:96:83:7d:c9:81:78:24:eb:da:91:19:9a:
                    a8:55:4a:9c:9a:d6:36:96:16:f4:6a:ef:ef:d8:29:
                    a4:37:b4:fc:58:2d:cd:cc:73:e6:36:25:69:d5:12:
                    e0:b4:bc:09:dd:ff:95:56:9f:12:0c:7f:66:c6:b1:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:CF:CD:3D:B7:25:E8:E5:E0:B0:73:69:A3:E8:9D:58:29:2B:E9
            X509v3 Authority Key Identifier:
                keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:45:4e:24:9b:d0:13:64:10:17:16:fa:af:22:53:87:e4:
         ef:ec:31:e8:06:21:c7:77:b4:1e:9d:3f:d3:45:6e:83:46:1c:
         30:e4:93:88:86:6d:76:93:4e:63:77:a5:9d:0d:86:5c:9e:50:
         60:e4:74:62:0c:3d:37:e8:58:75:8c:53:bd:b0:0c:63:b2:ed:
         6c:f0:80:d4:f6:96:df:06:05:e5:a2:b3:c2:19:92:c9:f3:83:
         19:64:bf:38:b1:40:ec:68:6e:e0:40:ca:c4:62:6f:36:bb:8e:
         9b:66:e5:75:de:24:52:77:b7:d1:17:cf:9b:47:b5:26:5b:59:
         b7:b1:b4:9a:f8:c6:31:4c:9b:47:4d:50:01:48:02:ec:40:57:
         6d:01:7c:27:52:13:10:c7:bf:cb:c7:48:46:ee:fd:6a:98:5e:
         63:3b:dd:c0:0a:69:2c:03:87:fa:c9:76:a1:9a:cc:f2:de:c8:
         b5:24:ab:c8:42:f0:69:d9:e6:6d:15:fc:c1:3f:0e:4c:78:a8:
         1a:ba:82:4b:52:92:cb:b6:fe:34:59:79:26:4b:e9:50:bf:dd:
         40:f3:ed:3e:bb:98:da:ab:fe:fb:df:ba:d1:96:17:84:2a:11:
         86:69:fc:c1:b7:2d:07:b5:38:f4:79:48:06:4d:8e:6b:85:56:
         cc:bc:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----