Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          MhGikFHcxFuqwN/DCPIi4TG6XM4BFMQN+7dN6CAhMT4=
Subject key identifier:   AE:90:E7:45:47:F6:67:4E:33:0C:FC:0A:89:BD:87:4E:3A:D9:07:83
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       01962F3D57C288EB7F57A20166FA2479D311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0CA6
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
                          2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
                          3: O_iSn-Hf6-lnBBBbeU5NCT30t74.roa (hash: fcavUHH7An7gJsOUK6AQo06SMjoUinMgDZMiN3IKqHA=)
                          4: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: oJtCaQA0NmcP6EFAlABVSYosfAk0gA/D67xVBhsK2c8=)
                          5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:c2:88:eb:7f:57:a2:01:66:fa:24:79:d3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=ae90e74547f6674e330cfc0a89bd874e3ad90783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:1c:d6:73:04:4b:ee:e1:7a:d1:f0:f7:cb:
                    b9:47:3d:a6:52:38:1d:97:1c:0b:81:93:05:20:12:
                    da:ac:5a:73:f9:1f:cd:8a:0c:0b:b8:dc:1d:93:23:
                    11:25:ba:41:34:08:39:12:0f:d4:99:15:27:dc:f0:
                    e3:eb:e1:39:ac:f5:bd:51:a1:0a:c4:f8:d2:c5:51:
                    52:e7:d4:b4:d5:87:0f:9e:0f:2f:bf:f9:e3:f6:b8:
                    8c:05:85:12:f1:f2:ab:a6:0d:ed:2a:07:3e:7e:8a:
                    63:8e:46:15:af:cd:c6:4e:a5:d2:8d:3d:52:41:eb:
                    52:73:2b:81:62:1a:6e:b8:d9:f8:72:9b:62:ff:28:
                    23:bf:9c:4e:c4:6f:1c:45:00:49:31:a8:ae:be:52:
                    c3:0b:e6:23:a9:2a:51:5d:dd:95:b1:4d:15:e2:e3:
                    ec:68:0d:cd:ca:86:02:05:dc:9d:18:cb:a1:30:06:
                    23:83:51:6c:82:0e:97:21:8e:39:1c:1b:6f:be:5f:
                    3e:fd:cc:d2:10:c2:9d:8c:00:82:e2:a1:42:a8:66:
                    58:01:8b:bb:5f:a1:1c:d4:46:2f:f8:c7:00:dd:a3:
                    d5:f0:dd:b1:32:c9:b2:43:f4:4b:3a:f1:77:1a:ba:
                    40:c2:bf:a8:37:79:d5:a4:86:7e:79:9b:33:07:2b:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:E7:45:47:F6:67:4E:33:0C:FC:0A:89:BD:87:4E:3A:D9:07:83
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:fe:99:27:04:8a:5b:7b:e0:c1:38:12:44:5a:b1:08:1e:
         53:fe:9f:01:60:11:49:16:68:9e:b8:02:cc:66:17:8c:04:3e:
         1f:6c:e8:6b:de:08:56:a2:a1:d1:44:b3:ee:68:d2:a8:8f:68:
         e8:e6:32:8f:5a:6f:22:89:ec:a0:d2:cf:ad:12:39:a3:0f:93:
         bc:2a:26:be:dd:f5:ff:e2:8b:9e:66:30:61:bf:74:b0:1f:d8:
         a7:13:b7:69:59:ec:18:6c:9c:7c:b3:79:9f:90:ba:66:26:53:
         45:89:1e:e0:1f:bc:f8:82:6d:47:43:b4:c6:c3:4a:79:2a:c5:
         47:e1:98:d3:8e:7c:78:e0:f4:67:f3:2c:06:9a:39:87:c2:9d:
         77:38:87:86:85:58:52:8f:b7:93:4a:be:f8:ec:c1:2e:ad:53:
         c8:cf:4c:7e:04:b1:b9:96:e8:f7:61:18:cb:de:7f:57:58:2f:
         48:68:a9:a4:b6:0d:23:b8:d0:8f:7f:fb:97:d7:40:a2:86:8d:
         d6:60:20:2b:75:3f:97:bb:d8:9e:c1:9e:fb:31:67:50:36:e0:
         24:14:46:a1:46:68:51:a0:13:99:05:d9:d3:9f:c0:74:f2:d8:
         50:d3:f7:0b:0c:ae:bb:75:af:09:cf:95:54:fb:7f:a6:ab:29:
         d3:41:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----