Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File:                     Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier:          hlrRTRRNO5D/QbOUO6q39oynqe3NxaDZWTef+j8N6lU=
Subject key identifier:   52:27:22:32:B5:D3:C6:96:88:91:E5:72:9A:AA:28:B8:4B:C9:29:9C
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer:       /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial:       01962DF43417F520426520343C5623FA5604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number:          0DC4
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
                          2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: C+EkniY+Cul6KMk6CArzvt6QA6MpM0RRLswzKKKBAcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:17:f5:20:42:65:20:34:3c:56:23:fa:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=52272232b5d3c6968891e5729aaa28b84bc9299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:7a:8c:9e:42:2a:cb:ee:10:1c:de:f3:bd:
                    e0:77:b6:55:f0:c5:29:ba:dc:5b:9b:38:05:03:27:
                    a4:13:c6:6c:1e:2a:fe:86:80:28:2f:a7:97:0c:b9:
                    3c:8a:09:cb:4f:d3:e4:e0:cd:5d:5b:0e:4c:21:6d:
                    01:04:d5:97:dc:59:34:1a:18:fd:41:81:90:6e:ac:
                    cd:5a:55:af:0c:be:9a:99:e3:2d:d4:b0:89:cb:91:
                    f5:b3:2d:2b:f7:23:60:f9:16:af:91:fd:45:98:93:
                    35:09:4e:bc:d6:35:e9:25:59:00:1b:76:83:5c:94:
                    f7:b0:ba:4a:68:48:65:37:67:ed:06:7f:6f:0d:0c:
                    82:4c:9b:9f:2a:f5:56:8e:0a:ec:42:f6:20:bb:44:
                    4d:31:98:22:b6:a8:04:d4:5e:e1:a7:32:9e:a8:41:
                    9e:ca:bc:29:3f:11:ba:5b:2e:b8:78:ad:4a:3c:35:
                    c9:54:5b:a1:a8:fb:84:26:48:6e:ea:dd:c7:1f:eb:
                    c0:8b:d7:59:39:67:21:73:a7:47:cb:95:1b:1d:38:
                    c0:b8:81:b8:ab:56:17:09:87:9e:57:5e:8f:66:d0:
                    98:86:78:15:df:f5:0a:fe:3b:86:03:05:a7:e6:0a:
                    36:1a:aa:45:13:3d:ab:d8:b0:a4:53:8e:09:f9:e2:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:22:32:B5:D3:C6:96:88:91:E5:72:9A:AA:28:B8:4B:C9:29:9C
            X509v3 Authority Key Identifier:
                keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:f2:64:26:30:c2:57:34:ea:94:61:d5:08:cb:d5:1a:12:
         fa:1f:bd:98:37:e1:2d:3a:e8:3b:7f:b0:59:16:96:ad:51:92:
         03:f0:c4:05:24:e9:11:05:f2:a0:d0:d1:e9:7c:fc:3c:91:3a:
         81:33:29:64:4c:31:05:fd:48:63:66:83:46:da:88:30:64:cb:
         66:cb:8e:85:78:ca:4d:d1:48:96:cf:4d:0a:52:73:dc:9c:fd:
         1f:7a:fa:14:54:33:8d:39:e8:8f:ba:bc:db:4a:ef:de:32:bc:
         72:d0:06:5b:c8:73:97:92:07:b5:59:a3:ca:77:ef:04:0d:07:
         21:09:b6:ed:d2:1c:bc:9f:10:70:5b:1e:52:27:76:0e:25:1c:
         46:a5:5c:66:a0:11:52:34:1b:31:ed:ea:a8:15:85:db:72:b5:
         4d:1a:15:2f:cd:e5:cd:2f:ee:04:5b:39:38:61:94:ed:4d:90:
         05:2b:e7:a9:89:f8:28:3f:ee:0d:07:b5:1f:82:9e:8e:29:f0:
         85:49:03:72:e5:ea:dd:26:e2:d5:c1:19:59:93:74:ba:dc:0d:
         26:2e:8a:b7:1f:fc:f2:9f:be:c3:cd:fa:c1:6d:2f:19:fc:7a:
         ec:e8:e1:5e:14:f6:f3:59:c4:c8:4f:1e:ab:3b:3a:82:c0:16:
         73:f4:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----