Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          7PlALjnweA7brgJTATHW6qavsabyWYbQPurScqyzQwo=
Subject key identifier:   E3:F0:6C:38:8C:3A:45:2A:0E:27:C7:8B:C7:FC:DF:E3:B3:A2:DD:56
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       01962F74E09FA60E9C0F6EFCCD654B5C0080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0A9C
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: a+Br8WP1cQ04y2OWvKpwqaMqKh2r21xP51b4Nlw0g0k=)
                          2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e0:9f:a6:0e:9c:0f:6e:fc:cd:65:4b:5c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=e3f06c388c3a452a0e27c78bc7fcdfe3b3a2dd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:0d:07:96:07:26:54:ea:c7:92:1c:10:d2:
                    2c:dc:d4:fd:4f:70:d5:60:8e:ea:08:ac:fb:fd:6c:
                    17:b1:de:77:d6:81:de:39:37:c6:d4:28:0b:24:31:
                    b8:73:74:66:55:d9:2a:ee:fa:be:ea:00:d3:38:a2:
                    b3:1c:d2:f1:33:06:71:f6:a2:18:14:ee:66:69:76:
                    44:bf:d5:7e:71:bc:db:f0:77:a1:6d:2a:40:88:d7:
                    01:6d:cc:ad:12:f2:1a:02:97:e7:d4:66:d5:b9:2a:
                    e9:bb:97:8a:7b:82:c2:80:fa:e8:88:a7:84:97:93:
                    86:08:ab:9d:f2:e8:f9:f2:d9:4d:ba:01:9a:b0:17:
                    78:ed:30:cf:7d:fc:39:12:2d:b1:f7:ce:34:12:63:
                    5a:13:f0:95:15:7c:96:db:d1:fb:de:6e:a9:d3:2c:
                    87:d6:b5:f3:cb:f6:85:2f:cc:3b:68:d5:6e:b0:a1:
                    f9:b7:8b:5a:5e:d3:05:68:ce:ec:a6:24:be:78:b3:
                    de:43:ef:c7:ce:06:ac:b0:ae:6d:96:8a:06:1b:02:
                    e4:50:4c:f5:43:f1:27:26:e3:4c:d0:81:2b:b6:d4:
                    9d:94:fe:c8:d7:d8:fe:58:9d:74:70:e2:39:bd:39:
                    75:96:bc:6e:a1:48:1f:36:12:66:98:ed:51:ef:ef:
                    7d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F0:6C:38:8C:3A:45:2A:0E:27:C7:8B:C7:FC:DF:E3:B3:A2:DD:56
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7d:64:dc:60:cf:11:97:ca:93:50:58:02:27:f5:da:85:8f:
         54:1a:82:f0:f8:7c:8f:b0:c1:75:c8:36:c3:f8:1c:37:50:33:
         f6:a3:0a:f7:51:2c:71:12:6c:7d:d9:d8:1d:dd:76:be:2a:95:
         67:f3:2a:31:de:19:4f:4f:ae:02:b8:3a:b2:8c:a6:5f:fb:e9:
         a0:1c:e0:f1:6c:a9:2f:c8:32:3c:46:91:5f:d7:fa:8b:04:25:
         00:ac:ea:6f:98:fd:0f:58:e8:27:f1:a2:0b:a3:10:4d:dc:5a:
         02:eb:26:3c:77:62:14:f6:a8:3b:b3:34:22:cb:a2:3a:dc:fc:
         b0:81:4d:8b:58:fc:6a:5d:e6:a0:c4:2b:4e:cb:8c:02:fc:da:
         74:ac:dd:25:dd:c8:a7:21:4b:70:18:fe:de:51:f9:b7:ec:1f:
         99:d2:d2:2e:15:a4:97:80:05:5c:39:9a:de:3c:02:fc:b8:07:
         37:c9:58:1b:ae:39:59:e5:7f:35:9c:67:57:42:81:4b:d0:dd:
         e8:ed:02:96:a9:db:65:5f:fa:bc:b2:fa:76:f9:9f:ab:79:b1:
         db:8d:7a:8e:7b:32:a0:a2:74:a3:1c:93:e7:6c:46:ce:b4:4f:
         a0:96:85:0e:17:74:17:0e:0a:b4:17:6a:3f:72:f2:23:07:ca:
         f3:71:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----