Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File:                     XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier:          uBPVUEF0hRjEnQpmS7ctIA9c4bSZ5TsS2POCNsUmjdg=
Subject key identifier:   19:4D:57:26:A7:31:B7:2D:68:6E:CF:81:56:FE:A8:38:B9:32:53:62
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer:       /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial:       01962FAB7A1BAA199D1D6BD4FE346E4DA22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: A0W4NLtnqVewyPWtMUlDJQbCQXE.roa (hash: MYxIYetVdJmSAzMctuQMtMzPS4ahJ2EbSnELEfjBMw0=)
                          2: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: fr80c8xJvmHMxpjbWLwIivKVgcaBYPzNqdn5gvF5XSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7a:1b:aa:19:9d:1d:6b:d4:fe:34:6e:4d:a2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=194d5726a731b72d686ecf8156fea838b9325362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:44:44:59:66:95:f8:38:85:8d:ba:ac:2b:
                    3d:6d:7c:0e:93:7d:8d:ac:a6:34:f8:5d:a2:98:e5:
                    43:00:83:97:d0:23:75:61:c6:ee:7d:9f:1c:2e:84:
                    d0:c9:98:9f:d4:64:81:d9:3c:75:d0:91:92:1d:ef:
                    29:6c:40:87:18:c4:24:f4:76:8c:f0:e2:fb:87:b3:
                    96:e3:df:a0:af:a1:9f:74:75:41:98:f9:4b:06:ee:
                    d9:eb:45:6f:b7:af:0b:ab:b8:83:ab:e2:13:b0:2f:
                    db:27:34:b9:05:f4:a1:c4:53:9a:ba:76:dc:df:38:
                    79:43:32:78:06:1e:09:71:11:74:57:4f:cd:46:b5:
                    81:b1:db:b8:5c:67:ab:af:5c:11:15:c2:7e:c4:7b:
                    08:b3:2e:c4:de:c0:1f:62:f5:dc:36:c1:92:71:6e:
                    5b:63:b9:e5:ba:0d:21:2f:5f:06:fe:f6:aa:2b:e1:
                    11:10:5b:e8:d8:77:68:76:77:e1:69:a5:d8:6d:eb:
                    77:a2:ad:3f:d2:93:5a:95:c0:6f:d5:ad:42:54:ab:
                    66:01:f7:9d:16:de:31:1a:99:ae:de:65:2b:5f:1b:
                    29:e3:54:3c:06:d0:03:23:58:95:a7:d4:de:d0:9e:
                    d6:9b:5d:7e:2f:98:92:1e:b9:b8:ef:5a:ac:81:22:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4D:57:26:A7:31:B7:2D:68:6E:CF:81:56:FE:A8:38:B9:32:53:62
            X509v3 Authority Key Identifier:
                keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:1b:2c:5b:2a:40:53:78:09:4f:08:73:e3:60:6b:1f:95:
         dc:ff:e9:66:3c:08:05:27:bd:0a:82:73:bf:75:51:f7:56:df:
         c4:d1:59:25:ba:fb:a2:be:b1:a4:c3:c7:3d:fb:e3:35:0e:57:
         4c:1d:6c:d6:94:d4:0f:b9:cf:f8:91:9f:92:92:41:40:ab:7f:
         61:05:72:d0:35:27:cb:c2:b1:32:60:07:45:68:b3:54:06:8c:
         15:b9:e1:16:49:79:90:18:f4:39:96:16:3c:e7:af:b4:c2:a1:
         e8:26:86:a5:ff:a5:56:46:37:58:03:c4:c2:79:9d:ef:4f:d1:
         46:73:d8:88:02:24:34:39:f8:b4:fa:31:f0:0f:9c:b5:62:6e:
         6e:4d:b4:34:2f:19:2a:8c:73:04:b5:48:69:94:fd:20:41:09:
         82:d2:83:30:31:0e:f4:b5:fa:3b:e0:3d:1c:d3:b9:22:f3:4f:
         6e:8a:f7:30:0a:ba:61:ab:fd:20:e0:5d:fc:c4:b9:4a:1b:4e:
         f9:d7:92:e7:c8:87:a9:d0:85:0a:b6:26:7a:5a:50:44:b8:9d:
         9a:18:12:61:14:a6:51:c4:5d:17:b6:72:97:4c:75:00:30:c6:
         11:14:bf:6b:6d:da:2a:00:4e:56:05:1f:6e:35:2d:8b:86:ce:
         60:db:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----