Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File:                     XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier:          g38toNPlkSygo9Byd+WIDmIKil8WjbBVJbC+xc7nSsU=
Subject key identifier:   18:2E:EF:03:82:9D:78:6E:1A:A7:94:17:C7:83:BA:E2:8A:8E:30:8C
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer:       /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial:       01962F3D902A757C2C2FFC16BA1C419FC2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number:          110A
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
                          2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: qwD0qEN3qOtrG0D0or7JYm7Nrh7caBETv2pM6XydDwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:2a:75:7c:2c:2f:fc:16:ba:1c:41:9f:c2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=182eef03829d786e1aa79417c783bae28a8e308c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:be:d4:0e:46:10:f4:d4:f1:4f:c5:72:d7:
                    88:0b:2e:fa:d7:93:2c:19:58:e8:88:37:91:ee:e5:
                    9d:ed:75:44:6a:0a:86:92:8e:39:8b:fc:63:90:6a:
                    da:d4:5f:40:a0:94:93:1a:dd:21:62:de:29:13:64:
                    fe:ea:69:0b:f1:33:03:41:4e:e6:0d:09:ba:58:0e:
                    a2:c4:bf:2a:d9:7d:1d:56:74:81:f0:5e:39:4a:8e:
                    93:80:73:a8:7f:3c:75:a7:dc:d3:f0:57:2f:4a:2a:
                    5d:3d:2f:b4:a2:a8:75:05:bf:ed:66:49:4a:a0:88:
                    aa:db:13:27:fe:a9:cc:20:1b:7d:d4:e2:27:a1:cb:
                    cb:44:1c:65:f9:62:97:2d:20:13:ba:7f:67:88:c1:
                    21:22:cb:23:af:e1:5e:9a:46:47:61:d0:1e:fc:4f:
                    d9:5e:f8:8f:10:5b:9a:5d:58:25:c3:c1:bd:72:65:
                    64:45:08:9a:fe:0c:97:15:3e:3d:5f:ce:1c:75:de:
                    86:04:3d:0b:6b:38:15:08:b6:b2:36:92:c4:b9:d1:
                    8e:bb:89:80:ee:90:ae:40:4f:5d:a4:67:65:35:fc:
                    32:0b:5c:3c:49:6f:89:f9:04:fb:88:64:a0:ad:60:
                    76:8e:09:f1:da:af:ce:c3:df:f2:ab:db:7b:ae:89:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:EF:03:82:9D:78:6E:1A:A7:94:17:C7:83:BA:E2:8A:8E:30:8C
            X509v3 Authority Key Identifier:
                keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:a4:5d:c1:c1:7d:f1:a0:ba:66:cc:2e:2d:8c:42:32:8a:
         3c:ff:a4:82:c8:3b:27:b9:d0:e1:04:7d:4c:76:c9:c7:e7:52:
         ad:17:4a:8d:e2:5e:03:e3:f7:d8:11:5a:88:16:ab:c6:96:29:
         6e:f6:de:23:bb:46:f2:05:cd:00:00:94:33:11:ae:a0:33:a6:
         9d:0f:ac:f9:77:4f:f2:d7:a1:52:4d:ff:a9:13:b7:66:9b:f1:
         9d:a8:a8:5d:85:92:fb:5c:5e:01:ec:64:37:57:1a:86:53:22:
         ad:30:35:18:4d:5e:58:f2:6e:e4:c2:fa:b4:6d:20:ad:f2:c5:
         c5:2b:93:de:c1:ee:b7:a3:e0:80:4e:15:b2:19:d6:47:35:f7:
         ba:42:7b:b2:15:a3:b6:b1:01:ae:0b:c9:e3:17:e7:67:c1:bf:
         18:e8:8d:5f:28:f9:bf:c1:46:2d:e3:68:fa:18:e1:f7:a3:fd:
         ed:9a:88:54:b4:77:16:d8:c9:04:a6:87:74:f7:9c:23:df:83:
         38:ca:0a:2d:a3:fe:c7:4d:ab:58:74:f5:16:bc:b6:ef:8d:9f:
         8b:79:bc:9b:51:31:c9:f4:0e:1b:73:47:cc:aa:bd:07:c8:07:
         c8:2a:33:e2:0f:7e:a2:ee:c7:ed:35:68:2e:40:2c:d1:d4:36:
         85:98:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----