Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File:                     xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier:          6QS1c1UMJa6GQPJfjmzWiRFfJIUdPqQJRHKYn+QvUOg=
Subject key identifier:   C2:77:6B:CB:52:E9:5C:7C:DC:8C:5C:9E:27:69:EF:2A:08:65:CB:4C
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer:       /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial:       01962F06BC5F226056EBE894E4ECAED74BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number:          11D8
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
                          2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: l7FnChWJ9WiFc/tuUL+gPnG1j6q2++Grra4MrVInYq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:5f:22:60:56:eb:e8:94:e4:ec:ae:d7:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=c2776bcb52e95c7cdc8c5c9e2769ef2a0865cb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:d7:46:f1:fd:64:ef:d7:5c:4b:75:48:9e:
                    a0:d5:ef:e6:dc:b1:a8:64:bd:21:67:6b:08:f5:83:
                    2d:11:54:b2:e7:f2:d7:9f:ce:2c:7b:c2:93:df:2e:
                    8f:0b:af:4b:cc:8f:77:e3:2f:36:2d:26:f1:2c:3b:
                    57:e9:89:30:59:5c:4b:af:81:0a:51:15:32:12:94:
                    89:55:e0:0f:ae:79:ea:1f:c4:bb:8e:83:45:7f:39:
                    a0:e8:3c:3e:48:6f:7a:7f:70:12:87:52:bf:dd:18:
                    d7:17:f7:c7:e9:3e:34:4a:a0:06:6a:84:07:7f:28:
                    a8:da:fa:ed:af:39:e8:8c:14:eb:3c:1d:9b:fc:d8:
                    76:be:12:b8:db:40:a6:c0:27:f9:c7:99:bf:1d:1c:
                    47:9d:22:90:8f:d1:08:c1:68:df:ab:e8:5e:1e:12:
                    38:6c:2e:8b:a8:f3:6a:1e:b7:95:d5:72:a7:30:b4:
                    ae:ba:da:cf:ba:a6:4b:bd:6e:c4:69:72:b6:d2:ce:
                    10:31:36:de:2c:04:2e:fb:de:0f:40:30:10:62:bd:
                    c2:64:ef:3e:60:a7:46:60:9c:c2:c9:a7:5a:87:b7:
                    6e:cc:db:e9:cf:9c:1f:91:0d:da:34:1c:91:38:31:
                    a0:d0:0a:7a:cb:8e:a6:7d:9c:b3:9d:70:68:80:45:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:6B:CB:52:E9:5C:7C:DC:8C:5C:9E:27:69:EF:2A:08:65:CB:4C
            X509v3 Authority Key Identifier:
                keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:6c:1e:a3:f2:1e:ed:31:53:eb:99:7e:62:e6:db:ac:a3:
         f9:6a:2e:f9:a8:d3:68:82:b2:3c:8c:14:de:e1:71:cd:d9:88:
         89:e9:2e:6b:3b:73:e6:9c:97:13:e5:c0:6c:bd:f1:b5:c7:f8:
         19:f1:b2:d1:e3:de:e5:f6:33:81:4e:92:ef:9e:b3:30:b7:33:
         ba:30:d0:04:a1:c5:91:cd:f7:a9:63:67:3c:9c:53:71:2a:c4:
         cc:fe:1a:e8:61:53:12:d5:38:d4:dc:8e:5c:ce:a2:8c:27:49:
         66:d9:8d:7d:95:a9:05:17:7b:41:c4:b0:15:57:8c:c7:0f:81:
         c8:ca:69:09:8d:63:72:ba:cf:95:c5:e3:14:cf:66:24:04:92:
         46:d2:2f:f6:18:e0:53:e6:d5:52:eb:36:5e:ea:c6:c1:f6:85:
         5c:36:0b:3d:95:f8:fd:2c:dd:dc:db:c3:f2:25:8b:dd:0b:15:
         7a:ab:90:77:9b:04:97:96:09:10:7c:16:68:ac:f2:07:fa:79:
         7e:2d:d9:3e:6c:85:56:01:38:8c:04:6a:f0:a6:3b:df:d1:8c:
         e4:a7:bc:37:a6:ff:66:89:86:d5:43:8e:37:47:79:27:74:e0:
         c4:b6:cb:ad:76:93:3a:40:6a:bb:e2:2b:57:3e:97:52:82:89:
         5a:3a:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----