Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File:                     X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier:          FjM0ucJUoslJExJhy17tNyL5Fa170EsEQlHG/j/yx30=
Subject key identifier:   52:1E:71:69:8E:34:89:12:67:6C:D0:C8:98:15:1E:70:B2:3A:11:63
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer:       /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial:       01962E996E9421BF1F33A7FBB890B012A855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: lGTSjCjrPwjb0lyAf+IAciuZt5qc3LWzId4BKskwrmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6e:94:21:bf:1f:33:a7:fb:b8:90:b0:12:a8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=521e71698e348912676cd0c898151e70b23a1163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:95:de:c9:d8:ab:35:d9:11:09:dc:d3:bb:
                    91:e3:47:60:f8:60:80:b7:33:d0:e1:31:3e:59:79:
                    41:6b:2c:95:b4:78:22:ee:d1:f5:69:bb:5b:73:d3:
                    28:5a:0d:0e:af:95:3b:5a:77:bb:bc:39:16:b4:c3:
                    db:7a:48:14:e9:cb:6f:85:28:7b:cd:11:ca:8b:f8:
                    46:34:c1:d3:ce:02:f3:c1:46:bd:8d:46:97:13:47:
                    b8:c0:72:0e:70:11:7b:23:40:b8:5b:fd:d5:88:19:
                    65:44:21:3b:32:d8:ce:16:3d:c1:65:e1:06:16:62:
                    c1:6e:16:0e:43:91:a6:ea:48:34:5a:04:aa:ca:ff:
                    96:a4:5a:6c:3d:f9:10:66:a4:c8:5b:07:a9:99:72:
                    34:e2:8a:be:fb:e1:62:79:23:f4:75:ad:66:f4:89:
                    8a:47:f3:5f:78:4f:04:19:c2:ec:30:12:ac:9e:a3:
                    f5:59:c5:a3:cc:57:8b:71:35:77:fe:9e:bb:96:38:
                    e6:5b:32:b8:44:64:58:e3:c4:be:03:34:34:15:ae:
                    b5:a5:1f:d2:b1:4a:c8:87:2b:99:11:3b:3f:2c:93:
                    60:08:46:e4:9f:61:7c:4f:f0:65:80:68:64:6c:a0:
                    8b:18:b4:7b:c0:b3:e2:d7:6b:e9:8c:93:dd:c1:6d:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:71:69:8E:34:89:12:67:6C:D0:C8:98:15:1E:70:B2:3A:11:63
            X509v3 Authority Key Identifier:
                keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:05:75:cb:3e:71:e1:27:a2:77:53:4c:18:2f:f4:49:2d:75:
         11:d1:ab:2e:9f:99:b1:48:67:49:ef:cc:11:bb:54:52:1f:4e:
         1b:8e:23:25:b7:02:eb:0d:12:3f:75:89:aa:f0:37:54:c7:0e:
         50:3c:15:50:1f:11:11:e5:f7:4d:8c:52:70:76:56:e2:c1:c8:
         27:35:11:4a:ef:1c:a6:23:f6:81:ff:22:78:32:f6:fb:a7:d9:
         af:c5:a3:24:a7:bb:8d:b4:fc:f9:98:a8:bd:9e:e6:a1:8d:6a:
         39:82:20:8b:fc:17:5e:03:9a:7e:41:1d:ac:80:94:9e:95:88:
         14:4b:0f:56:98:b1:44:af:c7:5d:5c:16:5e:30:03:6e:79:5a:
         eb:40:da:d4:b3:0d:91:35:2d:37:d5:6d:50:ae:8a:aa:d8:4b:
         f2:19:33:8d:6d:ea:5f:89:f2:bf:b7:3a:be:2e:f2:f1:78:cf:
         89:04:6b:87:b7:f4:0b:f0:ac:e8:a9:8e:1c:e2:d4:99:22:d7:
         09:ff:e0:93:f3:7d:9f:a4:a3:70:0b:00:fa:e6:db:3e:95:af:
         5e:50:3e:9f:30:06:0c:6a:68:30:60:6e:1e:8f:06:7d:11:7d:
         31:ff:ea:5d:aa:7c:f5:5e:e1:a3:b8:00:0c:41:32:a4:f9:d9:
         91:72:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----