Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File:                     X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier:          9tMCTFHgvBDtctCKE/sFUMHFUXiI8koIH0mlXL1pwbg=
Subject key identifier:   47:6D:DC:5D:47:15:BD:0A:3C:76:94:73:DB:6E:24:D1:A0:12:9E:50
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer:       /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial:       01962F7454DF97B8A701BFE25FB5030D5DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
                          2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: 3CVBST+d+lJQCq9U2DWTBcawd10nr8tB210CckkY5AA=)
                          3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:df:97:b8:a7:01:bf:e2:5f:b5:03:0d:5d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=476ddc5d4715bd0a3c769473db6e24d1a0129e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:8d:b1:0d:1e:e4:af:d2:f2:78:ee:64:99:
                    5f:6a:c2:b9:1a:0a:fc:b3:8e:89:90:19:5d:09:dc:
                    da:9d:36:9a:c5:89:aa:e6:4b:64:8b:c9:12:58:79:
                    1e:d6:f6:16:61:20:f6:06:41:24:1f:ab:b2:1f:49:
                    ea:f6:90:ae:27:cb:40:12:87:f9:a6:47:30:5e:a0:
                    94:4c:f3:48:1f:91:4c:97:0e:b9:c4:94:ca:84:3a:
                    46:30:fa:3f:54:c6:6e:8a:0d:c9:6d:22:81:09:aa:
                    40:e1:8a:8b:79:e2:3b:e1:02:ca:c6:35:60:20:a0:
                    0b:e1:98:79:48:9d:6c:69:45:09:81:b6:ea:e1:f3:
                    43:2b:8e:5b:94:c1:0f:7e:48:84:9b:1c:58:b5:8a:
                    f4:86:32:0e:7c:50:22:11:82:11:e3:35:6a:14:7d:
                    f9:b6:5d:9d:2d:85:4f:2e:c9:4a:33:fd:19:c8:cc:
                    7f:66:fe:43:69:ac:60:09:d5:19:9e:eb:89:aa:2a:
                    33:6b:1d:69:50:8c:7a:a1:06:0a:c4:17:29:e6:40:
                    fb:96:0c:db:14:ee:65:30:e8:a1:3c:10:a1:a2:bc:
                    0b:a9:9f:f3:fd:c9:36:ed:e7:99:08:50:40:e8:ca:
                    87:a0:e4:d6:7f:22:ab:37:12:ad:b9:35:10:e8:51:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:DC:5D:47:15:BD:0A:3C:76:94:73:DB:6E:24:D1:A0:12:9E:50
            X509v3 Authority Key Identifier:
                keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:60:7d:65:db:2b:1e:fa:bd:4b:27:1d:86:9b:b3:cf:aa:
         24:03:a1:7d:d8:4f:5f:5b:c2:c8:0c:f0:45:86:5e:3a:1b:2d:
         02:1e:e7:3e:fd:b0:b5:06:af:a0:f5:ab:5a:2f:69:7f:90:99:
         8d:32:b3:3a:3e:00:61:a1:6e:a3:f8:0a:e6:b2:2c:0e:b7:ff:
         7e:02:73:aa:62:2c:2b:42:ba:a2:f9:ad:f2:96:71:3d:aa:69:
         fa:96:69:d8:95:d9:11:a2:fc:ac:ed:0a:60:9f:4c:6a:91:fd:
         09:c9:1f:91:65:39:05:27:a0:3b:e5:ff:c6:75:fa:04:1e:b9:
         4e:6a:9c:cc:23:74:57:6c:00:03:09:c0:0f:e0:63:18:0f:e2:
         c5:35:40:91:eb:66:5a:57:a0:48:a7:40:ae:c6:af:9d:2f:c1:
         b1:aa:af:6c:fd:86:58:3c:99:e2:2e:02:fe:76:0f:8b:a8:ec:
         47:d9:c7:02:b5:c6:72:15:82:9f:e0:8e:78:d1:2b:b5:31:d9:
         4e:21:1e:7b:c1:e9:3e:1e:cf:b9:18:83:0c:bf:09:ab:a4:63:
         b4:2b:90:23:f5:67:14:71:27:0b:07:ad:30:22:df:d2:61:60:
         4e:c7:06:3c:cd:bb:d7:46:26:86:ad:e5:fc:09:f6:dc:82:09:
         e4:e7:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----