Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File:                     xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier:          hkZhbp1sSd20shlSs/bvKGkfQObm/55VROGzejFO3G8=
Subject key identifier:   AD:71:4D:E2:C9:CE:C2:C1:73:46:76:89:DF:40:AC:3F:13:37:EC:FC
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer:       /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial:       01962FAB7E6F43C3754C836348E3E3E08C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
                          2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: LNvb/sPGTGzLoiKraIopGnhegpAVPAYludOmyiIkbQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:6f:43:c3:75:4c:83:63:48:e3:e3:e0:8c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=ad714de2c9cec2c173467689df40ac3f1337ecfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:55:4f:4b:83:fe:0d:ec:70:2b:27:4a:a4:
                    0b:73:f2:1d:7d:8c:22:1e:51:cb:72:dd:e6:de:6f:
                    c2:1b:c4:95:5f:e4:fd:65:6c:ca:d3:69:43:cc:ef:
                    65:e3:45:cf:99:24:9a:39:69:50:24:61:81:7c:78:
                    2d:9b:4d:a4:d8:47:ea:98:e3:42:d6:f7:b0:4d:e7:
                    20:82:b6:c2:1a:9a:bb:ca:bc:73:0a:10:ff:31:34:
                    1b:e0:18:58:88:8b:3c:fd:e9:41:aa:0e:8b:fc:d3:
                    d7:c4:1f:ec:9f:e6:c1:f0:65:97:77:00:be:aa:23:
                    e3:17:d2:ca:f9:78:b5:06:0d:38:97:2c:d2:8c:ad:
                    86:06:f9:39:6d:b9:1b:ce:64:d9:76:c0:1c:81:71:
                    72:88:1c:fa:2b:3f:ca:ef:0e:3f:aa:c1:37:49:8e:
                    3f:da:c5:b8:df:2f:f5:3d:b5:0a:25:74:56:31:7e:
                    b4:7b:65:90:5e:fb:9b:37:b2:ac:29:ed:4b:4a:c9:
                    c5:b1:c2:f9:e2:35:98:23:7b:48:25:9c:50:2e:3e:
                    c3:95:96:f2:d7:00:f0:dd:31:31:45:11:c0:3a:83:
                    c9:ef:59:bc:07:02:27:00:bb:66:a0:c5:63:bf:b3:
                    b4:07:1c:2a:b4:ce:64:e4:58:19:2b:f4:14:f1:55:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:4D:E2:C9:CE:C2:C1:73:46:76:89:DF:40:AC:3F:13:37:EC:FC
            X509v3 Authority Key Identifier:
                keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:53:90:a7:5f:08:3d:aa:8b:39:fd:4c:76:94:7a:0c:99:6b:
         d5:fa:00:35:64:dd:01:9a:58:7a:4d:30:f5:b3:0a:18:b7:06:
         4f:a4:e9:a2:f5:0e:44:e3:6f:b4:ca:73:8a:0f:d6:4a:4b:9b:
         03:2e:e3:10:ad:26:ba:d0:13:14:1a:9d:f6:9a:50:58:d0:ce:
         0b:96:53:1b:b5:15:c4:09:ac:6d:aa:39:79:99:6c:89:3e:22:
         06:0f:79:97:8f:80:d8:3c:3a:fe:c3:f0:6a:89:d1:1a:4b:a4:
         59:bc:83:24:8f:ce:09:f2:ed:b0:ec:87:04:44:c0:34:d7:ac:
         4e:a4:8a:ee:5f:bb:8b:9d:25:a6:8a:f3:04:f9:42:3f:ae:ab:
         47:44:5c:99:16:cc:05:8e:f7:e5:df:86:dc:a6:e6:3a:d1:a1:
         48:e4:53:fe:a4:10:25:44:30:07:f9:d9:4c:29:ce:c2:0a:32:
         c0:42:66:f3:49:f0:c2:a9:92:5a:ab:da:3e:3b:8d:7f:d8:e5:
         32:e8:49:d1:55:e4:16:a2:d1:87:ab:57:b1:3d:ff:f9:ad:4e:
         bd:77:4f:6f:e0:c4:a6:dd:b9:df:d2:3c:77:8b:a5:b6:12:5d:
         8b:82:35:5a:1c:cb:8a:b6:9a:a1:45:26:93:56:b8:8d:a3:65:
         18:c4:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----