Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          NJZuP3O1XjyOLms+KNN6uM5cs+sjvT/x0DUMvKwRZ5I=
Subject key identifier:   F2:AC:94:C8:7C:B2:18:42:10:07:12:EC:DB:F0:76:FA:E9:09:B1:D4
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       01962F74760C46990ED868F920F7FE2504EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1507
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          2: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          3: H0yf0Oo2kc1vuXQI2C2XHgJR1UA.roa (hash: +TduWsFWrzOECmrsJ1U+XZI1HDNWMV9mx9iurejnLIs=)
                          4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          5: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: oq+gxC7I56slgmHtr+lLTVuVYhERRWhNB++1MH40CmA=)
                          6: zvoNtmVyFGPqGLORGNfy_liCG3g.roa (hash: OrM2f4p6SPuoSJpjtWAlr90ha2Ax6eDIbJJgANcSLqo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:0c:46:99:0e:d8:68:f9:20:f7:fe:25:04:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=f2ac94c87cb21842100712ecdbf076fae909b1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:24:07:c0:a0:42:85:58:7b:8a:80:52:a3:
                    45:77:05:35:fb:b6:4f:87:35:2a:eb:2b:6e:e8:f5:
                    2a:a8:37:c1:de:be:d7:c4:c7:8e:f7:22:a9:b3:ad:
                    a8:23:be:3f:3b:cf:2a:b1:0c:d4:fc:11:34:39:3b:
                    04:c5:b0:3b:2d:32:41:3c:aa:5a:51:26:bc:c9:aa:
                    0d:34:48:a1:83:fe:4a:21:10:79:95:8f:64:ca:2b:
                    73:23:fa:3e:0c:f3:be:a5:6d:00:00:a1:5c:ae:fe:
                    cd:51:f6:76:09:c7:02:60:be:78:b5:de:32:a5:b2:
                    fa:dc:4c:59:29:3e:26:04:38:74:1a:0d:78:e1:14:
                    81:2b:2d:0c:a4:09:74:2a:70:6c:fd:07:b0:e0:35:
                    8c:41:63:25:74:fa:68:00:f6:84:39:34:ec:34:42:
                    ee:cb:90:ec:63:84:a6:ad:f2:3e:e8:68:8c:14:b1:
                    b1:58:4f:a0:2e:f8:ae:ec:cd:3f:6e:9f:23:81:43:
                    e1:58:75:04:76:a4:25:62:b7:cc:93:04:b7:73:bb:
                    56:c3:77:5b:01:15:d2:e8:84:ed:09:4a:e5:a0:52:
                    81:57:1b:c9:2c:aa:9c:d9:2e:1a:4c:14:33:29:98:
                    d0:ca:f3:36:a6:d1:e8:f4:1e:58:e7:ec:19:68:92:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:94:C8:7C:B2:18:42:10:07:12:EC:DB:F0:76:FA:E9:09:B1:D4
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:3b:90:fc:8d:05:34:ef:fb:33:98:a8:e1:66:26:98:72:
         25:19:8f:9b:14:b8:57:3e:8a:f2:fb:49:93:65:cc:34:68:b0:
         99:06:3e:9e:1a:e5:72:e8:99:e9:fa:ba:58:16:7e:72:67:29:
         fd:ae:1b:eb:ea:54:17:0d:49:66:39:d3:f2:3f:38:59:13:9c:
         2d:e7:83:ba:60:64:70:e0:d7:0b:ee:da:83:e5:38:be:79:ed:
         46:e0:54:d0:06:a1:75:20:94:cf:10:4d:72:c5:58:f0:85:6f:
         7d:c2:f2:36:bc:2f:a1:76:f9:f2:7a:58:c5:82:27:a4:97:28:
         83:11:70:f0:71:e5:09:46:59:66:65:a8:7f:b7:de:d9:d6:16:
         03:a9:73:41:84:21:38:8b:ef:01:a3:0f:f3:ca:3e:de:60:d0:
         7d:1b:c3:b7:42:06:34:d7:01:29:45:3c:e0:23:ab:74:b1:83:
         5d:ad:bb:88:eb:49:82:d3:36:ee:cd:ac:c4:b8:06:95:c4:31:
         34:f2:34:e5:1b:2e:54:ec:2a:9c:5c:e3:ca:de:b7:97:7f:d3:
         fa:3b:c7:20:d7:2c:a3:f5:ad:f7:a2:67:ca:c9:3b:94:59:4a:
         af:52:88:a5:82:49:78:cf:07:d6:3f:53:19:b2:5c:3b:8a:01:
         3e:41:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----