Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File:                     XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier:          OZt9rSAN8peRVhRyTqJtFnpSvg6GMRNYPWVaiDRktvg=
Subject key identifier:   AD:6D:B6:4D:1B:18:B7:D0:0D:AB:22:C1:64:74:74:5E:9B:3D:FE:97
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer:       /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial:       01962FAB3C70A9F093FEE4587A45A8B9B35B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number:          1126
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: /9nz4NbSiIeEEVQpKob9QRH6wi10oO9Lws7xocPXBwk=)
                          2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3c:70:a9:f0:93:fe:e4:58:7a:45:a8:b9:b3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=ad6db64d1b18b7d00dab22c16474745e9b3dfe97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:0a:da:39:45:74:48:8d:f1:ce:96:95:1a:
                    3e:a3:21:89:a4:d3:78:8b:80:41:be:98:21:2e:09:
                    90:c7:ed:29:c1:fb:88:7b:8f:73:72:46:a6:10:79:
                    a6:8e:99:73:6e:c4:e0:dc:f6:a1:ac:b1:06:77:9e:
                    8d:2e:86:84:a1:f8:b7:40:33:56:46:27:f1:a7:f2:
                    fa:94:c7:33:85:28:2d:f2:5b:84:23:be:21:41:26:
                    5c:11:33:32:6a:ba:d3:9d:db:58:3d:9a:36:46:68:
                    11:19:47:9a:76:74:03:42:04:9b:16:0c:da:8c:9e:
                    50:99:66:cb:72:9f:a3:51:2f:7d:a6:f3:8d:9a:0a:
                    2f:7c:ce:9c:25:5a:33:ef:be:90:62:29:4b:3b:6a:
                    91:7f:18:ef:6b:69:88:6c:16:56:5f:ea:a0:8b:e0:
                    4e:11:91:79:41:39:e0:8a:2b:aa:e6:b8:22:01:97:
                    7c:b7:10:0c:8c:16:21:99:b8:11:bf:26:51:eb:d6:
                    88:56:98:84:c2:f5:e6:ba:38:f1:e0:b3:2b:40:70:
                    a9:55:f6:c8:23:bb:e5:43:b5:cc:db:aa:74:23:6a:
                    6e:42:fb:92:4e:22:16:90:56:0e:2e:5a:d3:c7:0e:
                    de:d6:49:46:a7:fd:bc:f2:ad:fd:d2:1b:6d:b0:8c:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:B6:4D:1B:18:B7:D0:0D:AB:22:C1:64:74:74:5E:9B:3D:FE:97
            X509v3 Authority Key Identifier:
                keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9f:f7:c2:bf:84:78:0b:2a:3f:b9:aa:a8:32:69:df:a5:0e:
         59:c6:75:f6:f4:ca:3d:d3:06:15:0f:7b:0f:c7:c1:ee:45:d5:
         d5:10:e0:94:9b:a2:7a:81:25:ea:8f:cc:b1:ee:8e:2d:73:24:
         2b:24:b7:e9:b5:d6:c5:2b:6b:9d:4a:2d:44:3c:0b:57:b6:18:
         60:47:93:05:d4:8a:dd:6e:b1:dc:26:b8:de:51:e1:5a:e4:2d:
         29:0c:c0:ab:bd:d4:62:24:7f:92:55:b9:a4:39:16:09:31:d5:
         bb:18:e3:4c:82:2e:a7:4d:af:54:cc:d7:53:50:e7:ca:e1:04:
         ee:e2:72:9d:82:42:26:3d:f5:73:7d:e3:b3:36:4b:d2:c1:8e:
         78:ea:f0:ba:90:44:08:6b:72:9f:9b:dc:fe:e4:0f:97:2c:99:
         c5:ce:86:94:ca:9d:86:fc:41:2a:73:dc:e6:25:db:66:38:5c:
         df:ce:f0:0e:12:de:da:7c:16:43:49:a6:ee:1e:39:2d:a9:9e:
         b2:41:16:99:f9:aa:7f:13:74:bf:76:98:aa:c8:6e:9c:62:d2:
         ab:f0:2b:b1:7a:44:18:cb:5c:1b:8a:77:5a:41:2d:84:97:db:
         76:04:04:00:93:5f:51:19:c5:ee:f2:a2:76:24:0a:71:bc:e8:
         cb:d1:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----