Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File:                     Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier:          1yYf+UMmx8InsZtAv4zdC6pdeEEgwFtOwFnzeKkcbX8=
Subject key identifier:   E2:78:D8:C1:53:A8:C3:22:15:83:BB:EE:84:0B:61:61:48:09:17:C4
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer:       /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial:       01962F0659F8D8BCFE5BED9384EA26C91DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
                          2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: ti/OWsSg/JPAdPocBll2Wz236aPzmJJBY0PolkpTceM=)
                          3: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:59:f8:d8:bc:fe:5b:ed:93:84:ea:26:c9:1d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=e278d8c153a8c3221583bbee840b6161480917c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:2b:05:58:2f:82:9b:a0:4c:66:25:a7:3b:
                    c9:65:3c:c8:15:16:03:44:36:d0:0e:08:ad:24:ee:
                    72:68:62:46:83:e2:96:21:22:16:28:4a:96:70:3f:
                    6e:7c:24:5b:be:43:7f:8f:7f:76:5c:0a:ce:c8:e2:
                    53:a2:5f:5d:28:db:e3:5c:14:bd:bd:d8:ce:b6:a3:
                    a0:68:11:df:8e:b1:52:61:67:bd:be:67:dd:90:90:
                    8a:7c:7a:38:2d:4f:b7:b1:85:3d:00:0c:74:ec:e3:
                    6a:38:af:ea:c3:25:e1:1c:39:f7:63:0b:da:a2:c3:
                    ca:92:cb:25:02:c8:cc:b3:ba:e2:93:60:ae:34:86:
                    67:5f:82:35:c2:36:ad:37:14:01:36:4e:f3:5c:47:
                    ca:a5:f8:20:ed:2a:ea:2c:ec:ae:1b:0f:a9:bd:21:
                    84:f2:16:40:27:82:d2:3f:63:02:28:6d:be:33:d9:
                    53:8c:ef:73:97:5e:7c:4e:d9:67:35:69:84:f4:12:
                    33:68:1b:ad:28:d1:64:bd:f1:b2:7a:1e:91:32:fb:
                    79:22:4e:04:8f:03:23:95:2a:83:8e:28:06:ca:7f:
                    2c:0e:76:d5:a8:c8:89:49:bc:49:47:c8:90:a4:35:
                    fb:07:ba:e5:54:57:03:07:5c:05:18:ee:c3:7b:95:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:D8:C1:53:A8:C3:22:15:83:BB:EE:84:0B:61:61:48:09:17:C4
            X509v3 Authority Key Identifier:
                keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:59:2f:9a:40:4a:b1:85:ed:d3:8d:c5:e2:10:9d:3c:56:d1:
         1c:54:a8:7c:46:ed:cf:20:78:12:65:c8:5a:eb:f2:5a:79:5d:
         5d:44:59:47:9d:ea:15:eb:d0:d8:29:fe:bf:81:06:1a:9c:9b:
         11:8b:52:2e:26:3f:5c:9f:3f:dd:d9:e3:64:1b:e0:86:9a:21:
         6d:d2:c8:f7:bd:00:7f:65:1f:24:c3:7d:92:c4:29:0b:07:78:
         fd:9c:0b:93:65:78:02:36:b1:51:77:c8:d3:b9:ce:79:36:32:
         af:e6:37:8b:ae:c1:f8:d3:75:11:be:ad:04:74:a4:07:13:66:
         e9:21:2b:42:d7:89:85:ce:66:ed:5a:73:e4:81:69:bd:26:f9:
         bc:b6:75:63:f3:aa:e5:ed:d7:e5:98:07:65:97:46:61:67:71:
         f6:19:ad:17:34:bb:af:c3:46:fe:be:b9:86:1d:5a:f4:38:f2:
         0c:10:9e:36:c9:7a:90:32:97:b1:71:0a:ae:d2:be:70:40:39:
         f1:cb:ae:96:f7:e5:10:45:8f:e7:d7:cb:db:4c:3f:fe:ca:08:
         70:c8:bf:dd:00:29:7d:cc:07:e0:9b:6f:de:88:50:8e:33:c9:
         ec:28:51:ff:36:68:3a:99:44:1b:03:ad:a3:ee:f0:43:b7:5c:
         37:fc:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----