Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File:                     xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier:          Zt5T4kVn5Eia5Fe9aAVQTTkwllzadvvWiVTpyXzsghg=
Subject key identifier:   D1:34:5C:4B:7F:5E:08:7A:3F:78:A8:C6:16:9C:24:FB:EA:9F:66:D8
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer:       /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial:       01962E2AE3274D3E9AC5997934CB303210B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
                          2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: Vo4qvohsPzOb4qK4rFxVMjMYblRcHdiPL+UIysJJWo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e3:27:4d:3e:9a:c5:99:79:34:cb:30:32:10:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=d1345c4b7f5e087a3f78a8c6169c24fbea9f66d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:fa:bf:af:13:ef:3f:f8:2f:a2:33:8a:54:
                    fb:32:82:23:59:85:df:e8:d1:f9:33:26:08:97:4a:
                    74:e6:6c:34:23:16:49:0e:64:44:29:a3:5b:e4:a4:
                    c3:dd:8f:0b:ac:ae:f4:d4:e6:0f:1b:bf:df:e0:c3:
                    3e:3e:51:eb:f7:16:55:e5:b8:a2:ee:2a:28:99:2d:
                    77:da:a2:a9:b3:27:87:d7:20:64:55:15:85:93:b2:
                    0c:49:6a:5d:42:06:ac:d5:bd:62:9e:a2:3e:a1:f8:
                    f6:97:a5:b5:9d:85:1b:92:90:56:f2:7a:40:cf:f8:
                    48:b4:61:62:01:7b:be:9c:42:60:34:27:0a:05:38:
                    90:6d:bf:a1:e2:8a:c5:a5:d3:3a:ae:5b:4e:c1:29:
                    3e:e8:40:9f:91:05:c7:49:4f:5e:d7:39:7c:56:1e:
                    44:73:2d:a5:bf:de:88:f3:f3:0d:64:48:cf:d1:aa:
                    09:2c:bd:04:6c:e8:24:47:05:1e:ad:75:47:db:9c:
                    89:ab:80:61:18:9e:1a:34:54:51:87:40:06:55:01:
                    d1:5a:a2:24:c2:03:b0:61:5e:22:14:80:ae:e2:ef:
                    42:6e:c8:65:87:b9:85:5b:fc:25:95:de:7e:0a:f1:
                    a3:63:19:26:a6:d7:3b:54:c5:49:90:ce:1e:42:6a:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:34:5C:4B:7F:5E:08:7A:3F:78:A8:C6:16:9C:24:FB:EA:9F:66:D8
            X509v3 Authority Key Identifier:
                keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0e:03:6b:7e:fb:cf:2b:be:0c:20:d6:18:14:39:e7:3a:fa:
         c0:fd:66:93:3c:3c:c5:f5:60:7b:38:34:88:b7:99:6d:94:a1:
         38:76:93:e8:55:8b:ae:6a:9f:94:a4:94:84:91:b7:18:53:8d:
         5a:ff:6e:b8:c6:52:de:7d:93:94:5f:f5:f1:5e:f3:27:22:0e:
         e4:0c:fb:29:2c:de:42:98:ec:ba:c5:78:20:9a:c3:8e:f7:4f:
         0e:af:83:e8:0f:05:e3:84:fd:8a:79:c8:93:dc:43:ef:81:e1:
         43:32:53:a2:61:97:7c:70:21:19:71:44:75:05:54:1d:83:04:
         9a:f1:ed:72:0b:84:9c:8c:05:ec:33:b5:11:70:c6:ab:c4:2b:
         ed:c5:70:24:e4:45:52:43:ab:0a:0b:21:ce:cf:86:96:49:c0:
         8f:c5:8a:80:df:a0:c6:a0:c2:f5:3d:fd:2a:41:bc:8b:be:58:
         04:53:84:81:f2:32:95:48:02:85:af:40:d9:b8:05:c7:21:1d:
         01:0e:c6:0e:bb:e0:fc:39:33:bd:b7:9f:97:0d:57:dd:bd:e4:
         c9:b6:07:66:10:24:ec:04:9c:da:fe:40:49:72:02:d3:68:a5:
         ae:50:66:ea:f8:2c:4b:1e:a0:c3:f3:6a:f0:eb:6c:29:d3:57:
         f0:c5:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----