Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File:                     XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier:          fbZtQxMsVKIDx6J/Op42WZrrEezj3F0j9vJ9Ya+At10=
Subject key identifier:   1F:DD:AB:D6:63:66:93:C9:5E:F6:D7:FB:E7:72:73:0D:1D:82:8F:95
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer:       /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial:       01962FAB372BDAE12B3D4648826D809B74F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number:          0910
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
                          2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: 2iAXEx7kinuB0/fga7Zt/LGSR3cwToIZp7kBCAT33cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:2b:da:e1:2b:3d:46:48:82:6d:80:9b:74:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=1fddabd6636693c95ef6d7fbe772730d1d828f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:b2:0b:36:88:f1:a3:b9:51:11:73:38:7b:
                    b4:26:18:4c:b1:e0:a1:e5:bd:47:57:65:11:f4:67:
                    6a:00:de:72:e8:83:5a:77:2d:96:c4:8f:aa:d9:6e:
                    28:77:ab:cc:81:0b:2a:9b:27:c3:1d:7e:a1:49:f3:
                    aa:21:6d:58:29:fc:de:c2:1c:1f:c7:9d:cd:92:4a:
                    06:64:c9:a2:3d:e2:ac:d5:37:35:06:ed:40:9b:ad:
                    d5:35:5e:a2:a2:ce:d7:9b:82:f2:8b:07:6f:5c:04:
                    89:94:59:2c:7e:04:cd:12:ff:f9:93:b8:02:88:0e:
                    ee:10:82:82:ed:20:c5:09:cf:47:0b:e4:0e:b8:62:
                    bd:4b:66:4d:a2:b4:bb:94:9f:50:8a:2b:ce:f3:69:
                    25:ee:5f:f7:2f:39:5b:9f:8b:4e:d6:bd:58:e9:f4:
                    a7:dc:18:66:4a:ec:7f:cd:15:1f:f1:b0:bf:92:58:
                    94:e6:46:fc:dd:82:d2:a5:86:ea:32:d8:a0:a8:72:
                    63:d2:ce:70:78:15:cb:f1:5e:79:52:21:05:07:f3:
                    ab:dc:53:ed:86:ce:a4:06:89:b6:d1:78:62:c3:d7:
                    af:14:82:d9:cb:22:b4:20:26:4f:5f:40:a6:6d:a1:
                    6e:a4:01:fb:72:8e:57:2a:6b:29:f6:99:4e:dd:2a:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DD:AB:D6:63:66:93:C9:5E:F6:D7:FB:E7:72:73:0D:1D:82:8F:95
            X509v3 Authority Key Identifier:
                keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:eb:0b:9d:4e:5f:ad:c1:39:c2:27:54:4e:e6:c1:d8:c7:
         0f:ce:73:b2:dc:b0:5e:a4:36:7e:3c:f3:d2:ef:fe:82:fc:45:
         ad:b9:23:60:d7:65:bd:d8:0d:26:d2:66:21:c4:c3:1c:b2:a9:
         ba:45:74:ee:ad:e4:5c:39:81:2d:e0:00:7e:63:f7:d0:fd:a8:
         d5:9a:c3:1b:5a:75:ec:04:11:3e:5b:d8:3e:5e:68:ae:ec:24:
         66:ca:6c:82:27:29:ad:cc:e8:1d:01:b2:99:b2:8d:1f:4f:e6:
         57:53:05:1c:61:d3:9d:f4:e7:fb:81:2d:a1:64:ff:86:4b:31:
         43:d8:31:d9:3b:33:43:c9:e6:42:16:91:38:bd:26:1b:72:65:
         0b:bc:cd:97:2c:98:92:be:7c:23:d0:08:1c:54:5e:2d:9c:58:
         9d:c4:7b:72:bf:49:ff:aa:73:e9:38:f1:06:af:ff:b5:ff:b4:
         5a:bd:1d:7b:b5:ea:c7:5f:ac:36:b2:25:a2:95:75:a7:a2:49:
         f5:0c:80:6c:69:53:7e:a9:cc:93:d8:ac:17:86:33:b0:87:4b:
         ac:d1:95:db:2f:c9:b0:06:f7:d9:c2:cb:2d:eb:40:1a:78:e7:
         b9:9a:0c:60:32:88:fd:24:85:4a:c4:7f:c5:80:8b:ca:02:0c:
         9d:27:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----