Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File:                     XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier:          BlBwnlLe/t8hyxwn84FkOjqXr8aDnX+qq4vMoLRWurI=
Subject key identifier:   4D:57:3A:6A:C4:43:DE:9F:AE:66:5A:2A:37:D4:80:D8:8C:A8:A5:F5
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer:       /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial:       01962ECF9B8AD1DB28F4B2BDEEBAFFD3437A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: f7/ZtonMqhVvFH5O5PHLoK1a+olOuESdfJOo8g1mGrc=)
                          2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9b:8a:d1:db:28:f4:b2:bd:ee:ba:ff:d3:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=4d573a6ac443de9fae665a2a37d480d88ca8a5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5c:ce:0c:e7:49:54:41:db:c5:7c:a6:b7:89:
                    f3:cb:e0:64:37:3a:6e:1f:be:08:c6:ef:15:3e:13:
                    06:48:3f:77:57:f8:b5:64:9a:29:c3:27:59:2d:c4:
                    85:00:c9:b8:9f:22:00:03:da:d5:05:d4:7e:98:5f:
                    66:2d:5b:86:21:eb:ac:4e:05:16:ec:b2:2e:d5:66:
                    d0:23:8d:7c:6e:ec:b2:e0:cb:62:4a:2d:e7:30:2b:
                    8f:f9:74:5a:b0:64:c0:96:9f:21:b1:9d:b7:da:5e:
                    a1:16:89:97:bf:5d:86:78:59:e2:c4:8a:61:83:e5:
                    86:5f:48:05:79:04:df:5d:95:08:a8:d1:c1:71:ef:
                    07:70:62:cd:91:f8:6e:2e:24:58:1f:e9:09:fd:f4:
                    1a:9a:08:73:18:f3:40:f5:f9:4a:59:de:3b:13:2d:
                    8f:90:f6:63:96:3f:96:77:3a:75:82:ab:cd:a3:60:
                    d9:06:7d:8a:73:ae:4d:2e:34:b1:db:d7:5f:23:4f:
                    6b:1b:ed:6c:4a:b3:e0:6c:91:16:97:82:f2:24:28:
                    c0:c7:f9:c1:62:e1:3c:49:34:c8:9b:57:c9:d4:5d:
                    c5:1f:a4:10:61:df:b4:fd:1e:56:44:40:da:16:a3:
                    2f:a7:23:ec:20:52:d8:24:f5:66:16:10:d5:59:6b:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:3A:6A:C4:43:DE:9F:AE:66:5A:2A:37:D4:80:D8:8C:A8:A5:F5
            X509v3 Authority Key Identifier:
                keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:de:db:bf:29:4e:3c:fb:35:63:22:6e:8c:6f:9f:40:0a:ef:
         f9:0a:be:66:92:a0:51:4f:a7:31:ff:c8:53:99:8d:6f:2f:fc:
         8a:12:c8:58:19:b4:d8:c2:ae:50:14:51:15:e0:63:98:11:15:
         5e:79:30:14:3b:b8:88:1c:80:6e:e5:f8:28:0a:8a:92:86:94:
         25:9d:f3:93:95:73:e9:ea:4d:31:7a:1d:cd:ae:63:92:45:f8:
         e8:84:f0:45:85:c2:4a:db:3d:5b:c3:ee:cb:be:d0:4f:b7:c3:
         61:5f:52:6f:3f:6e:72:cb:ff:43:be:88:79:fe:a7:06:46:4d:
         f1:be:af:f4:4f:97:f7:a5:c0:30:2c:42:99:31:a5:e7:1a:fa:
         39:7e:3c:aa:4a:12:f7:b8:7d:10:41:7a:35:1d:15:be:fe:50:
         f2:97:42:cc:36:d1:c8:ac:68:f1:b9:9e:de:26:37:04:e1:c2:
         d9:dd:7d:4c:a9:37:8c:0e:d1:16:f2:ee:bb:11:df:d3:47:db:
         d7:9a:f0:bf:56:c3:f8:7b:b4:fa:84:45:66:e6:b4:dd:89:08:
         0f:7a:bf:22:70:e0:fc:5b:7d:04:44:08:3b:79:aa:9f:f1:1a:
         01:dd:b5:2d:c2:2b:39:90:3b:5b:21:fc:b6:21:81:17:11:02:
         89:3b:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----