Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File:                     xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier:          ZBUfdnsSoWrYp0pIGXzvcHBBOLJmAkLFZGhcLM1trno=
Subject key identifier:   87:63:93:CC:5A:47:09:E7:2D:01:7B:1F:83:7A:41:08:B5:36:F4:38
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer:       /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial:       01962E9950AD36A586B94E0F94085E11392B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
                          2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: kjoVpG5Qfb8HokWPFSTMyDPatIoDFGSfbqTCoHqmrOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:50:ad:36:a5:86:b9:4e:0f:94:08:5e:11:39:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=876393cc5a4709e72d017b1f837a4108b536f438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:ad:2b:bc:8c:15:83:ab:92:7d:94:69:d2:
                    53:df:d6:e5:81:7d:2d:fa:5a:ab:b1:98:94:1b:ac:
                    25:c5:02:a1:1e:1a:9f:83:dc:96:93:01:31:a4:a7:
                    82:cc:56:5a:33:0d:fc:a8:c1:3a:ec:36:c4:9f:8a:
                    f2:43:7e:e0:a8:4b:33:70:0e:eb:2d:4b:a7:41:ec:
                    7e:5c:2b:78:aa:b9:5d:3e:a2:79:cc:65:eb:b8:2d:
                    f6:0f:bf:3c:00:7a:81:c9:69:5b:a9:ef:93:03:61:
                    b0:c5:b4:56:c8:df:db:c1:5c:1a:85:76:5d:d2:60:
                    5c:52:7f:d2:82:c6:62:e7:14:ea:33:50:15:06:7d:
                    13:76:eb:34:4c:35:a3:88:96:37:38:5b:fe:5f:37:
                    33:89:e8:50:5e:e9:43:53:90:ae:c7:ca:7e:65:1f:
                    fd:85:67:2e:6c:cd:89:1b:27:5a:46:23:f5:be:f0:
                    43:cf:06:21:b3:f1:75:41:0c:25:1c:eb:b3:8d:53:
                    a3:0b:0f:f8:b2:e1:ed:19:bd:12:d4:e3:00:7f:f4:
                    b7:67:36:0e:57:71:5e:45:3b:30:01:2a:e6:ae:29:
                    93:ac:fd:e7:d3:e4:59:4f:25:91:58:80:76:64:ff:
                    14:80:38:65:56:11:b4:b2:55:e4:15:5a:69:06:c7:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:63:93:CC:5A:47:09:E7:2D:01:7B:1F:83:7A:41:08:B5:36:F4:38
            X509v3 Authority Key Identifier:
                keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:5a:1e:57:b2:86:5f:4b:e0:d2:f9:40:43:ed:f9:94:68:
         dc:2f:f7:74:23:9e:a9:cd:e2:2d:de:e0:50:c6:d5:e9:eb:9f:
         06:72:b4:43:65:dd:f0:01:79:6b:23:01:83:5f:fd:cc:31:6e:
         0b:b2:91:55:e7:f6:95:06:93:64:d1:de:49:3a:cf:cf:fc:2c:
         b4:f5:5f:9a:ed:7c:48:96:e9:d6:79:c7:b7:8e:2f:48:69:06:
         6e:41:09:92:45:79:8d:a2:19:78:55:3e:58:43:92:6f:c0:2a:
         65:44:3a:88:85:89:0f:e2:23:b5:d1:5e:1c:f4:ed:63:11:37:
         e2:ab:06:e3:e3:aa:4a:73:53:f4:b2:2b:0b:2d:f9:43:17:95:
         f3:e2:21:d9:3d:8e:9e:f1:d5:d9:ff:77:2f:47:9a:22:10:ac:
         b1:b1:6c:b9:26:89:30:d4:57:bd:01:6c:9c:bf:d6:fa:2d:c6:
         c5:79:b9:c0:5f:65:2b:76:cf:eb:bc:9a:b7:71:db:b2:d0:5d:
         a0:17:5e:d9:63:63:34:c5:1a:25:78:41:d8:59:1a:2e:75:6d:
         a0:8d:40:2d:f3:ff:0d:6f:4b:b8:54:29:b5:7d:b2:f2:e9:44:
         63:18:c9:9b:68:53:88:31:17:27:2e:ef:12:2c:99:2b:06:44:
         fe:9a:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----