Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
File:                     xHKa8T09FW9BGXaxduVU-mcddvc.mft (raw, json)
Hash identifier:          ZALbQrG3rsEManaF31Zh3W/eUPYEcOj1X6UUgbYNTVw=
Subject key identifier:   95:25:31:10:AA:7C:05:CF:E7:91:03:0C:44:7B:96:49:CE:73:D9:2C
Authority key identifier: C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7
Certificate issuer:       /CN=c4729af13d3d156f411976b176e554fa671d76f7
Certificate serial:       01962E6191CDD56B7D969692D0B7C6CF8A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft
Manifest number:          122E
Signing time:             Sun 13 Apr 2025 09:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:08 +0000
Files and hashes:         1: qFZMGyq85ztg5ytAQ7RbzglxnGU.roa (hash: kMRZIxRuZxVhg2DxKXhubRuKlbKba7EMDPUaAyexKng=)
                          2: xHKa8T09FW9BGXaxduVU-mcddvc.crl (hash: UaXHa9kqPhZ0xxlp0kzqFug3qyi1bX/7kZpVzcnsB0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:91:cd:d5:6b:7d:96:96:92:d0:b7:c6:cf:8a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4729af13d3d156f411976b176e554fa671d76f7
        Validity
            Not Before: Apr 13 09:01:08 2025 GMT
            Not After : Apr 14 09:01:08 2025 GMT
        Subject: CN=95253110aa7c05cfe791030c447b9649ce73d92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:57:c1:61:f8:59:7c:a5:1d:9f:5f:ab:1e:
                    d1:5d:bf:e6:0a:d9:56:08:52:57:d0:cc:98:9c:0e:
                    93:21:9b:4c:6f:d0:a4:20:d4:85:f2:c9:65:aa:b8:
                    e4:74:dc:d1:f2:9b:67:1e:b0:67:3b:08:be:c5:7f:
                    80:2a:5b:d9:8e:e0:51:63:e6:c5:87:d8:40:48:9d:
                    b1:23:98:85:ec:9f:b4:37:54:8a:33:32:7c:15:1c:
                    59:ff:4d:1c:b6:a3:96:1f:ce:64:c4:c8:3e:0f:77:
                    15:32:64:8c:ee:93:d5:46:df:8e:24:c1:67:7c:fe:
                    c4:b4:98:66:ff:37:7b:15:99:a8:77:eb:28:d8:bc:
                    dd:eb:53:92:d0:3d:b6:c0:23:e5:44:91:60:92:c6:
                    90:04:28:1b:5d:51:12:f0:6a:18:34:d3:b5:e2:19:
                    c0:e9:81:39:c1:9f:f1:41:b3:3d:c4:bf:28:82:18:
                    fb:c8:91:40:70:6c:3d:9a:61:c1:af:d8:51:dc:d3:
                    f3:a7:44:9d:6b:d8:03:ed:7f:a3:3f:ad:c0:e3:a0:
                    8d:4c:47:be:45:a3:0b:25:4d:1b:58:59:fc:62:ac:
                    97:62:48:c8:44:d6:d1:07:4b:c6:5e:c8:59:4d:bf:
                    91:b9:87:8c:36:96:1b:d6:d9:c6:ab:4d:83:94:92:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:25:31:10:AA:7C:05:CF:E7:91:03:0C:44:7B:96:49:CE:73:D9:2C
            X509v3 Authority Key Identifier:
                keyid:C4:72:9A:F1:3D:3D:15:6F:41:19:76:B1:76:E5:54:FA:67:1D:76:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHKa8T09FW9BGXaxduVU-mcddvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/95e060-fa2a-4057-9578-b0898fbb1cab/1/xHKa8T09FW9BGXaxduVU-mcddvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3c:7f:b8:ad:c5:6c:f7:f3:47:bf:6b:6e:5c:17:aa:64:e9:
         6a:28:3e:ca:55:25:aa:98:66:6e:dd:19:16:49:00:89:9c:9d:
         5b:45:f4:90:bb:f0:0a:a2:50:0b:e3:a8:7b:8e:ce:40:3d:ae:
         df:3d:06:e0:99:bc:79:33:ff:88:da:e0:82:e4:20:c1:ef:29:
         18:7d:55:98:91:34:9c:41:5e:c6:8a:27:d4:83:03:f9:4f:bf:
         6b:c3:b3:84:7e:ad:ee:2d:60:56:af:f8:e6:8c:5c:d4:5e:6b:
         25:91:c5:27:52:70:d6:17:2c:e6:77:c4:a2:1b:9b:0c:34:c6:
         9d:54:a6:6f:c4:a6:3a:39:31:ff:35:f9:3f:ad:44:fe:8e:d2:
         68:1d:33:be:e0:d6:2c:c6:16:c7:ac:63:3d:3a:87:6e:09:50:
         ae:dc:e9:58:28:4a:26:8a:ed:ab:50:34:63:57:1e:c0:ff:f1:
         b9:ea:60:9a:9b:cf:47:33:ae:5a:bd:97:20:1c:d0:bb:6f:d5:
         6f:4f:30:8f:e8:d4:b7:e5:31:d8:b4:48:9a:a8:97:26:ac:c9:
         eb:1a:d1:e3:72:1d:d9:e6:5e:cb:ea:fd:45:47:0c:4d:7a:10:
         cf:4b:d8:df:84:37:12:6a:c5:51:de:14:25:09:71:01:63:95:
         3a:d9:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----