Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File:                     XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier:          K54LTYyNexR3LQ3vZgHlZkHytiUUQlhMr8R+rjceTX0=
Subject key identifier:   BE:2F:B5:72:A6:B8:B8:41:88:1E:9E:E3:82:DB:58:62:8E:E7:82:55
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer:       /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial:       01962DF4261CBE4129A97541889207903AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: aODuzie1PJXT0QeP9HjbpoM7shsAweKYm/YVzp72wnI=)
                          2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:1c:be:41:29:a9:75:41:88:92:07:90:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=be2fb572a6b8b841881e9ee382db58628ee78255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:c3:d6:5e:65:ac:02:b6:16:b8:da:25:a5:
                    29:69:38:25:b9:b7:7f:4d:71:34:0b:86:15:06:76:
                    d0:da:8a:33:f1:22:6f:20:99:df:12:b7:d2:da:35:
                    08:c3:be:17:7a:a0:f4:fc:4e:36:a2:46:63:23:9c:
                    e4:bd:11:7d:90:b3:18:af:4e:92:43:27:c0:b6:f1:
                    67:21:cc:5e:37:eb:25:78:21:a4:74:34:05:b0:ab:
                    47:68:a0:87:2d:8c:39:06:d5:3c:af:9e:19:8d:94:
                    87:34:39:0b:2a:e4:3d:8f:8e:f6:41:e4:b5:14:3f:
                    c1:b5:bc:df:00:d9:e2:f3:50:e8:af:79:3c:4b:f0:
                    8b:9a:62:f4:47:b8:2d:98:e3:ab:b8:61:33:e7:c4:
                    4d:a7:94:d2:23:c2:6d:8f:fc:42:99:ed:09:fc:91:
                    b8:76:fd:a1:d1:1b:24:68:ca:82:b2:3e:67:04:26:
                    f6:69:39:e4:72:7a:f8:9d:6b:aa:d5:50:05:71:21:
                    97:74:dd:0d:49:5f:4b:7f:71:5a:ac:15:ce:95:97:
                    16:27:7a:cf:9e:1f:37:de:17:16:45:84:31:8d:0d:
                    77:3b:62:8b:2c:81:b8:f9:82:28:51:ef:c5:07:cb:
                    b1:9b:97:fd:3b:45:d1:a5:06:0e:13:0e:2f:01:b6:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:B5:72:A6:B8:B8:41:88:1E:9E:E3:82:DB:58:62:8E:E7:82:55
            X509v3 Authority Key Identifier:
                keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b8:db:35:71:8b:7e:1c:aa:2f:34:40:69:34:82:cb:a6:19:
         29:c4:92:75:47:2d:19:c2:0e:09:c2:27:15:cf:5e:63:26:e3:
         c6:59:28:e8:12:dd:b2:a1:2b:98:4b:17:0a:2a:5c:92:e9:92:
         b0:b3:2b:97:9f:12:c7:2c:bf:c8:75:2c:c5:d9:74:3b:cd:08:
         5b:05:a5:41:94:4c:91:c0:c7:90:35:5d:cb:ec:97:f3:2e:61:
         0d:b2:4c:54:ce:09:91:54:33:5a:2a:e4:c5:d7:b9:ef:0c:b1:
         bf:93:06:5e:43:e4:3c:c8:9d:96:bb:b5:73:61:ad:21:2a:a6:
         2c:82:da:f6:9b:c7:10:13:0f:86:cc:32:8f:ea:54:77:76:3b:
         1e:68:18:68:a1:7f:4d:4c:12:e8:62:b4:ce:4b:d9:c1:3a:e2:
         a0:76:3a:9e:e5:f3:1f:10:03:46:34:b0:c2:82:03:92:04:b0:
         46:53:42:f8:64:f4:87:69:6d:29:b8:b0:69:33:21:01:0a:6c:
         49:0c:34:55:04:34:d8:f1:79:df:dd:6a:2a:0e:bd:a2:40:05:
         b9:93:c9:ec:eb:9f:28:66:5c:76:80:a7:00:38:46:de:da:c1:
         bf:a7:10:0d:97:c8:cb:35:be:1a:a3:a4:45:46:0b:81:bb:c4:
         f1:18:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----