Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File:                     X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier:          fzsG968XrPn+4azfuQHwKcBIEGi37ptxECw8BrkPo+o=
Subject key identifier:   DE:0E:03:6F:AA:8B:B4:2E:B2:2F:86:9D:A8:D8:F1:9C:CA:12:96:60
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer:       /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial:       01962FAB96BDD498C9036DB433496109814A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number:          09FA
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: kQxibMfy0lFZI2Jlr4pQOry0Ct/bWlimjGtY4a/bHHM=)
                          2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:96:bd:d4:98:c9:03:6d:b4:33:49:61:09:81:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=de0e036faa8bb42eb22f869da8d8f19cca129660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:e3:85:67:f5:f4:8a:19:c5:15:97:6f:15:
                    36:f0:aa:51:35:cf:30:a4:50:c4:ed:c5:5f:5b:46:
                    8e:8f:b1:41:6f:c4:94:2c:bd:18:22:59:fa:09:f0:
                    44:a4:28:5c:3d:51:58:bf:9e:73:3c:51:00:e9:a7:
                    6f:e4:95:f8:a5:3a:4c:1f:61:26:39:94:e4:05:de:
                    d9:17:86:de:2a:15:95:78:05:25:73:ad:ac:ea:d5:
                    1a:97:ac:74:55:0b:00:34:95:1b:c9:cb:9b:99:fd:
                    94:bb:b2:ce:ee:34:e3:f2:95:ba:87:d5:36:50:e2:
                    a7:2f:ea:f5:74:eb:13:ac:71:0c:43:06:69:45:2b:
                    89:43:a9:d3:d6:29:5f:7b:28:84:9d:3b:13:54:27:
                    0f:e4:a4:19:bf:cf:1f:82:88:4f:ed:80:1a:c0:b4:
                    a0:72:2d:6f:4f:16:c1:b1:3d:54:3c:39:6b:ba:ae:
                    22:de:06:bb:80:7e:48:07:b4:83:5f:92:33:4c:50:
                    2e:9c:7a:b3:41:24:2a:d8:0d:89:be:81:d9:95:c8:
                    59:fc:d2:64:aa:a2:b9:5b:05:49:0c:54:e9:89:8f:
                    fe:f6:a0:17:ff:84:38:e6:b3:74:28:f6:fc:67:d6:
                    c0:cb:1a:14:14:28:e9:47:ca:b9:b8:0f:97:77:e4:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0E:03:6F:AA:8B:B4:2E:B2:2F:86:9D:A8:D8:F1:9C:CA:12:96:60
            X509v3 Authority Key Identifier:
                keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:56:bb:6c:94:84:b8:6f:ca:10:23:0e:a5:f4:53:4a:12:23:
         db:52:f1:24:bb:ae:29:1c:ab:0d:e1:a6:ec:93:54:95:5b:eb:
         c5:b4:a4:7c:4a:fb:a0:10:0f:14:a1:a8:71:04:9b:be:e7:2c:
         a6:15:8e:f0:02:b3:91:75:8b:79:a3:8a:db:e1:93:8d:57:43:
         96:6b:b2:6c:70:25:57:e1:65:2f:30:49:b4:d7:25:08:4b:7e:
         41:e5:bd:be:aa:c7:4d:e9:ef:4b:49:8a:0a:63:5f:3e:ec:6d:
         22:59:85:d5:ce:3a:49:fc:a6:2d:aa:cc:68:51:8a:02:8b:dc:
         be:70:b8:2b:f0:de:ab:6e:56:3c:44:1c:ee:1f:1d:5c:1d:6e:
         16:af:34:48:d3:d3:de:57:0c:d1:2e:95:53:70:fd:f9:d4:9f:
         0d:4f:39:ed:0c:6e:6d:33:6b:dc:f2:51:b0:1a:04:76:55:fb:
         ff:a7:47:0f:02:91:c0:8a:5e:95:15:a0:35:d4:b4:9e:94:64:
         35:3a:4c:4f:f1:11:36:67:4a:7d:93:de:5c:52:6c:e0:9d:28:
         4b:5e:43:24:21:92:93:51:d7:87:bc:69:44:2a:11:89:20:7a:
         10:bc:d5:64:47:cf:d0:f3:d0:fc:a2:74:63:d5:6a:27:37:71:
         44:ce:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----