Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File:                     X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier:          b3s+3DAo7FRkkL9LZwxS7GJ2ltiCb0C6Cvo4PGnFiLY=
Subject key identifier:   7B:BE:32:4C:5E:46:4A:AB:23:E9:D6:4E:A7:49:94:4C:C0:12:1E:E0
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer:       /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial:       01962F74ABE4AFA21E16D9AB1A57624CCA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number:          03EB
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
                          2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: wEfpbzlv8PkUZKt2Rm+Me98DmBA5xR5nrz4QIJpY1iU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:e4:af:a2:1e:16:d9:ab:1a:57:62:4c:ca:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=7bbe324c5e464aab23e9d64ea749944cc0121ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:10:94:e8:24:a8:8d:79:7f:e2:bb:06:c9:
                    5c:ad:9b:f9:22:b3:d6:fd:e1:5b:b7:1b:60:be:c6:
                    49:99:62:27:e1:77:01:05:78:cd:91:cc:cd:79:de:
                    19:af:e7:7a:ac:30:f1:f8:0e:48:f8:b3:af:9a:04:
                    f4:9b:e9:e0:fb:10:1d:14:8b:e4:eb:aa:d8:f6:fc:
                    5c:21:a9:08:1b:45:65:d1:42:2b:08:72:a2:39:59:
                    e7:33:4f:8a:05:1b:eb:1a:ab:da:ed:36:72:de:18:
                    80:00:4b:10:96:ec:e2:84:bd:3d:5c:16:1e:8d:33:
                    50:1c:a5:d0:a5:49:65:bd:32:7d:eb:71:17:8a:27:
                    db:c9:83:eb:19:ee:cc:d9:66:9a:32:9e:56:47:87:
                    9d:d5:aa:32:90:19:f9:20:b7:3d:89:2f:de:f7:2d:
                    6f:39:48:c7:6b:5f:6b:6e:43:3d:9d:e1:01:0e:83:
                    28:c3:3a:d3:6a:81:ad:af:a6:3c:56:62:05:d2:3f:
                    5c:57:b1:40:66:14:bb:65:29:40:e2:cf:0b:f8:72:
                    3a:2f:97:1f:b8:aa:85:3f:0b:aa:c6:f0:0c:ef:43:
                    f3:2a:74:d5:1d:f5:23:5b:0a:2f:c7:96:75:3c:7d:
                    46:f2:e0:a3:55:9e:e0:32:ea:71:3e:5f:e6:53:65:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:32:4C:5E:46:4A:AB:23:E9:D6:4E:A7:49:94:4C:C0:12:1E:E0
            X509v3 Authority Key Identifier:
                keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:43:83:0c:20:5c:d0:5e:77:70:c5:3b:87:86:f3:8b:9e:
         b3:99:e3:75:50:25:41:a3:d0:ce:ed:87:7f:81:98:25:7f:e8:
         b4:89:95:ed:4f:60:9d:ee:69:45:52:bc:cc:72:c5:53:7d:9c:
         9a:7b:2c:69:e7:f5:7b:d3:cf:0f:e5:83:72:47:b5:86:a6:44:
         d2:85:7a:81:c4:5f:d0:00:d2:f6:81:c5:1a:f7:39:de:7d:53:
         8a:40:7c:de:62:25:fc:fc:03:2b:c4:6b:13:38:6a:05:4c:48:
         c7:4c:47:21:ce:24:24:12:a6:2f:9b:06:3f:e2:7c:13:8c:51:
         71:6f:a3:f3:83:4a:c6:f1:5e:5c:62:0a:a6:c1:a7:f0:d4:f0:
         af:c1:ee:02:41:d1:de:32:03:5f:e5:24:fb:a8:db:0e:88:bb:
         70:86:7d:a6:52:26:eb:e0:fc:c8:18:81:38:61:c0:c8:1c:0a:
         a9:21:b7:c6:a9:35:69:cd:5e:df:0d:a7:3e:17:c7:56:5b:a4:
         98:62:27:3d:2e:02:54:2e:b3:bb:f7:c2:cc:f2:b1:4e:f0:63:
         8a:78:de:c0:0d:93:b0:21:83:70:51:0f:3f:3e:c8:93:e8:2a:
         2d:31:18:79:c3:09:7a:6f:c8:8e:af:1f:6e:cf:96:c4:70:e1:
         90:f3:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----