Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File:                     X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier:          DCL39hCBUu1dZtZ4Vaf6dN7X93zeJaezEXza/KZCqNo=
Subject key identifier:   90:8B:8A:78:75:94:99:46:81:F1:F2:A1:8F:F2:9A:C3:B7:B9:62:1D
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer:       /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial:       01962F747C117878954807500B75459DFA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
                          2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 7Z7uahEz0yx1KIzHpRHP8BvyvnOPi+UeekACb1eSGvg=)
                          3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:11:78:78:95:48:07:50:0b:75:45:9d:fa:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=908b8a787594994681f1f2a18ff29ac3b7b9621d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:64:12:bb:95:fb:6d:a0:d5:83:ee:fd:35:
                    5c:af:ff:f9:23:f3:75:ad:c1:4a:a7:d2:66:8e:47:
                    be:c5:45:71:55:f0:87:7a:8e:9a:41:9b:5e:12:ec:
                    de:d7:8d:39:a2:6c:65:37:15:cb:f2:89:8e:a4:08:
                    50:64:85:f1:06:dd:78:4c:da:93:fa:36:cc:08:b6:
                    84:a9:d4:1f:8c:e4:a6:77:59:7e:71:2f:7f:e5:64:
                    d8:3d:3c:22:8d:7a:b2:f1:77:93:fa:13:90:a6:38:
                    8d:c2:62:7e:15:e1:55:d1:89:0e:f2:f6:32:99:3d:
                    da:f5:da:e3:07:5a:a7:95:97:ac:42:f8:2e:f8:2a:
                    d1:87:e8:b2:ec:65:31:55:e3:f2:b5:e9:4d:12:67:
                    39:bb:9e:a8:54:85:00:ef:e7:9d:bd:6a:93:52:c6:
                    3f:f4:f1:e8:ec:01:10:56:66:d8:64:5f:57:da:05:
                    17:f0:51:cc:c7:0e:8d:ff:f1:a3:8b:2d:2e:ff:57:
                    d3:09:22:42:ed:27:07:7c:f2:f7:59:a6:c6:06:84:
                    fe:2c:78:1a:17:3b:a9:33:f6:de:b2:3d:4d:09:cd:
                    21:88:8f:49:e2:4a:f3:ac:e8:d1:cf:44:2e:df:06:
                    12:ff:18:aa:46:3e:5d:57:97:5f:84:bd:92:38:88:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:8A:78:75:94:99:46:81:F1:F2:A1:8F:F2:9A:C3:B7:B9:62:1D
            X509v3 Authority Key Identifier:
                keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:99:c0:02:78:f3:f4:5c:6c:38:9e:a1:83:2b:25:42:b8:
         28:14:8b:cf:fc:8a:4f:79:ef:fc:38:a7:de:84:a7:8a:a6:3c:
         30:16:2c:84:5d:f6:60:fc:a7:c0:3f:63:f9:8c:09:3e:bb:5b:
         4b:06:06:fd:97:64:7d:73:40:48:a6:9b:32:5f:12:97:f4:da:
         9c:78:21:ef:d9:6f:af:15:00:2f:eb:80:2c:fd:f2:12:50:d5:
         b9:c6:22:6f:75:05:eb:0a:55:57:2d:81:72:ed:f2:98:a5:42:
         aa:34:1f:7e:8f:08:77:05:97:4c:fc:1b:46:54:af:38:c5:92:
         14:d2:72:47:eb:18:45:e5:47:f1:71:79:38:8b:ab:ee:5b:a3:
         2e:6b:e4:e0:6f:95:69:56:dd:3b:c8:14:d8:6c:30:ae:6e:44:
         86:25:f8:33:0a:6a:7b:2a:35:4b:97:09:00:61:58:66:5d:44:
         17:5b:f1:3a:44:ee:2c:f7:25:5d:dd:24:17:89:73:76:a6:7c:
         0c:46:5c:a3:a1:77:f9:6c:7e:4f:1c:2a:6e:5e:f5:a8:6d:ac:
         8d:5c:c2:80:d7:6d:2b:03:6a:d7:35:aa:94:20:68:31:f4:29:
         d6:9e:ec:19:81:5a:b2:bc:69:a1:0e:54:2a:b8:9e:51:5f:bd:
         83:82:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----