Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File:                     XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier:          IWRH+4t5lj02HJlK0miLXvnJk8NNEY7asac8Wj17kIw=
Subject key identifier:   72:D0:C4:2F:12:B3:C2:88:37:C8:D1:4A:3A:6F:92:EA:D0:12:F8:CA
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer:       /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial:       01962E9989711F39BA3D40960FE12633590C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number:          1415
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: mDO1zxuqoLT+vaAqWtYJdYwD3auiSfNgTzGgABIX560=)
                          2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:71:1f:39:ba:3d:40:96:0f:e1:26:33:59:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=72d0c42f12b3c28837c8d14a3a6f92ead012f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:40:f6:3e:21:fb:fe:28:83:5c:d7:a9:03:
                    cd:88:17:71:67:17:d8:de:97:94:4c:fe:70:b7:11:
                    a0:fa:24:d9:15:04:7b:c5:fe:1c:de:3f:8b:6b:12:
                    03:68:72:13:33:a1:cb:11:21:4e:e8:06:c3:46:26:
                    29:62:b0:17:0c:66:84:73:fd:18:34:fb:d4:48:b2:
                    3b:71:f2:2a:62:31:f7:d7:61:4a:88:30:72:5b:2b:
                    d9:83:a3:67:57:ce:32:ca:a8:65:d0:6e:fe:d3:58:
                    e5:0d:ab:1f:88:4c:af:bb:cc:57:cc:fc:2a:19:ec:
                    49:97:c3:1b:d7:90:55:09:96:28:ba:ad:74:f7:90:
                    f1:8c:56:3d:91:0e:4b:bd:9e:f9:01:93:e0:3e:69:
                    41:28:2f:19:08:48:86:2d:ab:af:46:ec:d6:19:12:
                    21:0c:e9:62:ec:0d:48:ea:5d:13:56:9b:ab:26:c1:
                    a7:ab:f3:9f:59:eb:8f:ac:fb:8f:b5:3a:a0:26:22:
                    d7:ac:fa:fe:a2:2c:6f:af:55:6b:3f:c4:45:7e:b5:
                    53:18:5b:8f:87:1a:65:f1:fd:f0:01:78:0d:da:f2:
                    f0:fb:a2:4c:01:4e:90:e9:4a:30:29:78:84:33:16:
                    59:02:3d:ff:7e:a7:e3:8c:43:44:b2:d2:48:e7:69:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:C4:2F:12:B3:C2:88:37:C8:D1:4A:3A:6F:92:EA:D0:12:F8:CA
            X509v3 Authority Key Identifier:
                keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:44:22:fd:9b:5d:b4:9f:60:49:dc:c9:51:a4:9e:15:64:78:
         78:9f:0e:60:cf:94:89:97:ef:75:65:3d:f8:52:a1:10:07:eb:
         35:b1:7c:c4:a9:21:bc:c4:5d:ff:95:2c:da:17:58:12:1a:07:
         82:94:4f:62:38:68:27:65:1c:e4:b2:ad:56:d0:7b:d1:c3:41:
         ef:ea:63:5c:4d:e0:b3:9d:ea:cf:72:7a:f7:f8:61:d9:b6:b3:
         71:d9:ad:4b:8e:ca:88:f5:02:ed:21:36:4b:60:63:42:1f:72:
         8b:4c:44:5b:f9:6e:cd:c7:9c:44:b5:10:da:d6:7c:81:e9:3b:
         b3:00:ce:0c:ea:35:d4:59:d1:67:15:2b:bf:fd:f1:9b:be:b5:
         95:ec:7d:1d:b1:5c:e9:55:be:2d:9c:a7:d9:16:3b:91:b5:17:
         8f:ac:e2:3a:b6:57:96:b6:25:2b:6f:9c:6b:4d:3a:92:d7:8e:
         37:8b:01:b3:dc:86:2d:ef:eb:a7:38:7e:65:f1:a6:04:a0:9f:
         4c:57:9f:ac:40:e1:78:d7:1c:69:4c:22:f7:c2:a7:a8:56:69:
         16:3e:94:3a:06:a1:09:68:ee:b2:a3:30:03:eb:57:62:51:34:
         32:e5:20:4e:13:68:ec:53:90:b5:2f:ab:85:24:e5:8b:0b:8a:
         7a:d2:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----