Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File:                     xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier:          axFGhi7iwsYZm1VpnaEIWEI73QV/6wmdUJl6c/je/F4=
Subject key identifier:   BA:74:B7:7C:84:BC:2F:01:68:75:91:1E:CD:0E:95:EC:7D:E6:36:32
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer:       /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial:       01962F74329A1B36A94EC4923A34ED34E1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number:          0456
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
                          2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: ri27AyLnyQnHmCzk+LFGFv9+fS9pyvfddEWkZ07abK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:32:9a:1b:36:a9:4e:c4:92:3a:34:ed:34:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=ba74b77c84bc2f016875911ecd0e95ec7de63632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:1b:e0:4a:bf:82:53:7f:88:86:b0:53:cc:
                    98:10:a7:0d:bc:80:6a:65:9e:44:96:cc:38:e8:d8:
                    94:14:c9:33:66:21:23:21:93:f9:c7:a1:56:d7:e0:
                    15:2f:58:15:0d:5e:75:0a:ef:95:2b:86:0f:10:b8:
                    b5:b7:5d:0a:06:ca:a0:1e:b5:dc:2f:ed:9f:06:b1:
                    2c:ae:6c:22:c7:cf:5c:aa:85:fc:f5:d8:ba:6c:73:
                    7a:fa:75:18:3b:88:77:a6:e7:00:d5:01:27:9b:07:
                    9d:14:80:a2:ed:8b:be:a4:cb:5f:92:e1:8a:4d:42:
                    1b:9f:31:45:ba:ba:9f:da:ea:a2:e1:39:a5:7d:5e:
                    ab:a4:da:9c:4f:de:5d:b9:7c:03:8e:8c:00:a8:59:
                    3b:b5:9f:7a:c6:04:f0:6f:47:d0:59:40:eb:96:a8:
                    8e:58:d0:0b:67:0a:2d:c0:a7:35:a7:ea:f1:a9:e3:
                    71:32:c5:82:f4:87:c1:f3:a1:49:fa:7a:ea:5c:39:
                    ec:2f:6a:cf:bc:9c:04:cc:82:57:16:67:62:87:3b:
                    97:a5:c1:a9:d0:0a:70:d2:44:8d:53:0b:5b:96:74:
                    d1:33:cd:b9:6d:72:ce:d0:68:b6:8e:48:02:99:f7:
                    05:2a:47:e0:2f:22:2d:70:15:56:a6:d1:92:c2:51:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:B7:7C:84:BC:2F:01:68:75:91:1E:CD:0E:95:EC:7D:E6:36:32
            X509v3 Authority Key Identifier:
                keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:a3:6b:4d:67:72:4a:00:1e:6c:12:32:57:17:a8:b7:7c:
         c7:db:bc:c2:9e:06:9e:fd:9e:8c:c9:e0:e4:d0:75:5d:de:2b:
         eb:d3:3b:1d:72:38:af:da:f2:a7:49:2d:4b:b9:30:2c:20:5f:
         e2:02:6d:12:12:17:6e:49:1b:38:8d:6f:84:c3:3f:b1:18:a6:
         2f:a7:50:55:0f:f9:88:36:33:98:7d:f0:a4:3d:a7:f2:af:b4:
         50:37:13:da:2e:01:d3:eb:37:52:22:80:ba:32:ba:f8:cd:ec:
         09:67:aa:3c:9d:c1:75:1a:5a:a9:f9:74:df:47:a3:06:52:37:
         2e:3e:36:0b:34:13:a5:38:5e:89:07:a0:7a:6f:21:c7:46:c2:
         06:11:14:5c:a8:42:92:ed:e9:29:e5:7b:aa:8c:01:a0:8f:d1:
         8a:bf:c0:78:c8:2b:88:e4:4b:e8:09:27:c0:46:e5:fc:08:dd:
         a6:11:b6:c4:e2:67:5a:be:34:a2:d2:3e:ab:6a:9f:f3:ea:76:
         56:50:ca:d6:5e:67:9f:9d:b9:89:bf:a9:f8:13:e4:16:53:d1:
         d4:28:4c:93:2f:ca:1c:00:9d:ad:9b:65:60:9a:53:50:27:72:
         0f:7a:74:d9:81:1e:76:8f:56:0c:2f:18:3d:bc:f4:9b:d6:1d:
         a8:74:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----