Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File:                     XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier:          GAUlHV8Pxkn5FEaRFCBSy6i5sEM41///8NirkHkCE/s=
Subject key identifier:   EE:DE:48:CA:DF:B3:B3:1F:39:4E:B5:57:89:11:59:1C:A7:25:81:5E
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer:       /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial:       01962F3D7B9D0A883B778A7B017664634C89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: wG6qF02HcZIrdzFI/GlbxLetSim0m0lGNJrCJA+rTxI=)
                          2: auYlcZnEp-yqavQsok9_TPLHAq0.roa (hash: kbe3quRrlIxTjuDhfKrAisNkV8HOTBuxWR/raJshlU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:9d:0a:88:3b:77:8a:7b:01:76:64:63:4c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=eede48cadfb3b31f394eb5578911591ca725815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:91:b0:01:0c:8a:ef:89:3b:03:46:9f:72:
                    65:67:00:a6:d1:37:b5:b9:4a:66:08:95:b2:e4:0d:
                    8b:81:07:b1:a0:b6:3a:35:eb:e9:75:79:d0:84:90:
                    74:e5:ad:c0:5d:96:f9:00:a2:96:10:39:b1:5f:3d:
                    87:b8:19:90:d4:bc:bd:8d:70:44:14:01:a2:88:3c:
                    61:ca:8e:37:68:5a:9d:1c:76:6c:75:4c:94:30:28:
                    f4:37:80:3f:2a:14:a0:5a:a6:c4:f4:06:84:cd:08:
                    3f:14:3a:47:94:2e:13:ac:cd:8f:2f:a5:48:68:4a:
                    14:38:16:de:ac:71:87:ee:49:0a:ad:01:36:66:1c:
                    17:06:e5:37:12:c8:7b:97:dd:bc:03:63:06:ce:16:
                    f3:2c:99:fa:66:72:86:56:e5:ad:9c:f9:43:bf:a6:
                    eb:fa:07:e8:0f:a9:c6:ad:da:06:db:51:92:e8:cc:
                    ab:0a:e8:a5:0c:65:64:15:3c:63:35:78:c4:26:ce:
                    4b:8a:bd:2b:55:98:fe:ea:b1:1e:1f:0b:2c:f9:92:
                    7e:4d:f1:f5:e5:bb:c8:0d:6d:b0:4f:e4:41:53:aa:
                    6d:ef:f5:6a:ff:19:9a:fc:d9:56:9e:27:f9:82:ab:
                    86:8a:af:f6:a2:24:29:bd:12:e5:e7:d6:a8:a4:25:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DE:48:CA:DF:B3:B3:1F:39:4E:B5:57:89:11:59:1C:A7:25:81:5E
            X509v3 Authority Key Identifier:
                keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:07:29:78:8d:d9:02:18:72:a5:d2:a3:e5:c5:e3:9f:db:
         8c:c3:24:06:2d:61:88:78:63:b4:3c:25:16:98:00:d1:5c:6c:
         ab:76:fa:d7:30:f5:bc:39:c2:e8:14:89:11:2f:4e:1a:db:ec:
         8b:c7:97:7f:d4:e8:05:3b:c6:92:5f:8e:49:7f:c8:d2:3b:0e:
         01:f6:9f:d1:f4:4d:ba:ef:a6:f2:b0:f6:f8:84:11:1b:17:e1:
         52:5b:4e:35:0e:a1:42:1e:4c:0f:46:20:18:a5:0f:bb:82:bc:
         db:84:65:84:09:5d:23:a6:bc:54:1f:08:bd:3c:97:e5:f2:c2:
         c4:23:9b:1b:b6:a5:62:ee:f6:81:74:05:80:84:13:06:06:4e:
         0e:4c:0c:4e:d6:43:6b:43:86:ad:c6:18:63:c9:8b:9b:c5:11:
         88:a4:50:60:38:cd:c7:41:fe:8e:72:0b:f6:a5:de:b5:31:00:
         4a:06:ab:07:3e:18:37:e9:e3:eb:ce:9a:1b:7c:50:1d:ae:d1:
         d1:a2:88:fa:6c:1e:d1:8b:b8:63:60:92:ea:62:9f:1e:61:e1:
         1f:45:90:a4:55:3a:ec:ef:90:5b:7c:af:34:da:fc:d3:c3:4f:
         02:31:c4:aa:8e:96:b9:bf:06:a8:7e:5f:8c:fa:bd:bd:89:39:
         ce:fc:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----