Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File:                     XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier:          3xgRJFcG7gemDmfBMEes2CgaVJe6xZSOSGTfk7QmEsM=
Subject key identifier:   55:56:30:4B:1B:48:BE:8D:91:DB:1F:89:97:BA:91:C8:ED:B3:2E:66
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer:       /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial:       01962F3D3BE93C8F7FCE37081DA21E18DFF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number:          0DC3
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
                          2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: HPyM1OIdDggMjCYqAHC1vyPWu8KlWLxJxNkERpTEy9A=)
                          3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:e9:3c:8f:7f:ce:37:08:1d:a2:1e:18:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=5556304b1b48be8d91db1f8997ba91c8edb32e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e5:ee:2b:8e:db:6d:b0:29:d3:42:62:ba:22:
                    5f:d0:04:e3:b4:76:13:38:5f:81:0f:1c:ed:97:2f:
                    1a:b6:bf:ac:7c:8c:af:61:11:92:8d:7d:3e:f3:42:
                    46:4c:96:5a:b8:3a:c7:c3:9e:19:e3:8f:f3:30:f9:
                    c3:66:25:8f:b3:66:a3:a8:4d:30:2a:48:3b:21:5b:
                    78:f5:37:6f:38:c1:8f:39:89:c0:ce:d2:82:51:36:
                    d9:06:19:8f:25:ba:8c:16:31:45:e2:c2:ab:2f:b6:
                    a2:31:96:39:b3:ad:c3:16:63:67:38:b0:91:86:ea:
                    e1:4f:5e:e8:e8:f0:2a:23:fd:7f:6d:11:f4:75:5b:
                    d5:57:6b:ff:5b:a2:8f:41:cb:3e:44:f1:6a:a2:b1:
                    94:01:1d:58:51:0b:7c:5c:ed:da:62:b3:45:6b:04:
                    d5:f6:67:3d:03:ef:f1:a6:5d:a1:e2:59:43:c7:41:
                    c4:42:ad:52:41:0c:b8:d0:c2:13:5d:5e:db:b9:4e:
                    e6:78:40:41:a6:e9:42:97:af:19:c5:84:9e:10:d5:
                    1f:ab:e3:ba:2d:9d:ec:48:91:fa:6b:14:82:8b:bf:
                    6d:94:35:eb:d6:18:7e:6a:69:5e:19:31:00:d4:32:
                    c1:94:f2:08:72:4f:e6:6a:ef:ce:fb:d7:05:74:b7:
                    32:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:30:4B:1B:48:BE:8D:91:DB:1F:89:97:BA:91:C8:ED:B3:2E:66
            X509v3 Authority Key Identifier:
                keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:63:59:bd:ac:50:f0:04:d3:de:e1:04:1a:0e:42:43:4d:d6:
         ad:d3:76:25:f3:cb:5b:3b:23:14:99:0c:b9:20:54:5c:48:a1:
         a0:47:53:50:e3:94:e2:ac:82:b0:f1:c5:1d:24:ef:1a:89:74:
         12:ff:02:32:3e:72:ec:47:3a:c9:49:f5:47:75:1f:8b:6d:6f:
         7d:94:40:7f:5d:3e:25:d5:ed:ff:db:ca:f1:c2:18:f8:e1:5e:
         7f:b9:47:bc:c4:8c:7f:0a:2c:d0:d7:87:e4:27:33:f2:ff:ed:
         97:90:3a:28:5a:e5:53:8a:4e:05:5f:70:d9:b1:b3:22:19:9c:
         f2:c9:de:9b:78:21:12:25:71:84:54:ac:79:e7:a1:b2:7d:47:
         96:1a:9c:10:6f:d5:c5:d2:7a:ed:18:d9:52:eb:1c:a6:17:89:
         b7:4c:89:db:cb:17:36:07:7b:6c:ca:42:75:d1:ab:13:0e:55:
         76:7a:00:bb:ea:ce:aa:66:a7:b9:ba:7e:7d:5d:f2:56:c2:07:
         77:a0:71:a9:c1:9c:ed:80:a5:40:d2:e8:f6:43:bf:b1:ba:11:
         8d:89:74:e4:05:e7:d1:4d:ff:c6:ab:c6:da:3f:5e:87:4e:d1:
         c6:df:f2:0a:04:b6:0b:27:f1:c6:c9:4e:77:a4:a6:a4:32:26:
         4e:3d:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----