Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          XRgvLkwyBvsrTjYoS5ze5s8dVo9JTSU9URU5Et+Sa4U=
Subject key identifier:   EF:1A:A7:17:7B:51:64:23:B4:27:89:FE:C1:49:A5:0D:64:31:C6:E4
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01962FAB12A4DE60AA13620DE125C8F469F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          05B2
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: ISwu8WB7qyBLfmKkrp_dDZ3x_1U.roa (hash: qQJXsssGcHnCv5RADljHJRBio84QXVcGD1FkE+MM62U=)
                          3: NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa (hash: raIph2bihZjajkCc/rrPwQ/IODtF/UxH380z+IjhFkM=)
                          4: U8uZttP15oZyoOdC4yJMGnc-c0U.roa (hash: T5n+Pp56XalYqTIUYU27BO7TOuaAqMSh2xkCxmvOElQ=)
                          5: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: D3f4aVHVP9oWv2Y5qQwSXRT165w+Bydz2O5xjcO0Vfs=)
                          6: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          7: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:12:a4:de:60:aa:13:62:0d:e1:25:c8:f4:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=ef1aa7177b516423b42789fec149a50d6431c6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:28:25:e8:54:21:24:3e:3e:74:1f:3c:cf:
                    e3:75:b8:ed:21:41:a3:7f:68:1a:0b:76:c7:a2:80:
                    9d:4c:be:f1:9e:60:0d:32:2b:25:c3:ba:f8:8b:1a:
                    fc:8a:f8:b2:6b:47:07:77:8b:b1:e0:92:e6:7e:75:
                    5c:73:2c:b8:9f:c5:26:be:86:69:28:be:23:de:b1:
                    7e:18:34:06:70:fb:2f:2e:af:77:b5:10:3c:d4:f3:
                    aa:51:40:49:ea:8c:8e:c3:48:d8:4c:f8:64:d7:7f:
                    81:f9:5e:d5:a7:fa:21:8d:1e:9d:68:a5:76:63:aa:
                    63:c6:d7:c6:ef:ae:e3:5b:54:26:22:14:c0:93:f1:
                    b8:31:fd:33:f9:3a:6c:e8:e7:b5:57:da:77:34:7c:
                    27:fd:0c:cd:8e:56:82:1a:9f:28:3a:a1:44:98:c4:
                    43:65:a4:2d:cf:fb:7a:e4:18:f0:ac:44:47:64:cf:
                    9e:55:10:e2:b4:c4:05:c4:fc:bb:75:5f:b9:49:bb:
                    63:99:ba:7b:ac:51:98:17:27:98:b8:72:d1:8b:34:
                    29:c4:7d:55:37:be:9d:60:1b:dc:6f:31:0a:61:64:
                    ac:f0:06:c8:e7:30:cc:70:54:8d:42:b5:e7:a1:6a:
                    5c:06:89:cc:b9:b2:04:43:3c:45:bf:63:50:33:de:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:A7:17:7B:51:64:23:B4:27:89:FE:C1:49:A5:0D:64:31:C6:E4
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:65:18:b4:6e:79:2a:2d:e3:96:95:6e:6e:b8:04:2b:7b:
         67:18:f4:d5:ae:06:a1:4c:bd:cf:38:28:44:29:ee:ca:bd:e6:
         7a:9b:4f:b4:b2:1d:7c:f2:4e:00:fe:5c:1f:44:49:cc:08:fd:
         e7:e0:54:9e:b6:7f:b8:94:f5:e8:2b:7a:38:9b:d6:9a:01:44:
         06:95:53:15:91:25:bb:ac:3f:d9:68:63:3a:b8:21:f8:44:db:
         d9:09:10:a2:5b:ee:ca:b8:3e:c2:ee:be:53:69:a5:64:65:2c:
         c2:af:37:2d:29:ec:47:a3:b4:bb:fb:aa:5b:ed:35:61:a6:b2:
         7d:f4:69:e7:9f:9e:7b:74:46:d5:09:36:f2:e3:b0:f0:61:b0:
         ab:83:e5:b3:e4:d8:ac:d2:f0:5b:e9:dc:50:72:f2:56:4d:06:
         fe:21:33:8b:b9:a2:5b:a3:48:af:57:53:8e:88:4c:97:91:5d:
         60:6e:f5:2a:c0:b6:05:03:e3:5c:29:51:c0:29:d2:bb:0f:da:
         48:bf:75:ab:55:8c:cd:34:9d:c0:64:f2:f6:d1:35:85:2b:3a:
         50:cc:53:77:6a:52:c3:02:26:1f:e5:6a:fc:3e:ad:a8:b5:d8:
         07:4e:fe:2f:59:72:80:e9:1e:d6:03:f7:0d:9e:66:c0:01:09:
         9f:a4:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----