Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          U8EGrMW5+ZjOvFq6W+WYKMJOpM1bbD++AhOv2K4VIAw=
Subject key identifier:   C9:90:8B:93:EB:AC:16:23:32:9C:80:95:0C:D4:78:A8:92:97:7A:DB
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       01962E98AF3E860DDD1C28C785E373BFF5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 0RjgNRg0mrp-p0sUPcMzw9plAa8.roa (hash: /sIoNqXyJWt95PHx7AGb8pmEwy8qEaDKsd4+c9cdNhU=)
                          2: ByhvC5UK-f2zjyXJoOZ55QYyoFY.roa (hash: 7F3UrolhPGtbR/fySIsaZ7YzGq6FNxf2q9uu01GI6C0=)
                          3: DyR2WdJX7ABSVFzMG--Y2Rw480o.roa (hash: +lC9V9G29eZ0ubABsOu96g/K8AVuHJSib8VHpmomp9Q=)
                          4: HO-WF7oHezpfwwV3wUG7AErtTlE.roa (hash: 8SO7ZYvzAB17ADVUPvCZiM0fv0nIROPrrAJMFayW82A=)
                          5: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: hlHzkKZGwzlY32VE0UFMJnQNfwfadvUWmNmNGfkHDXM=)
                          6: xZlrXqE8pd9RbauBbqs28LHvRHA.roa (hash: 2cai0/ZfgqLeuQF0rbi62rT8qPeDCMYpSTam6ord1Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:af:3e:86:0d:dd:1c:28:c7:85:e3:73:bf:f5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=c9908b93ebac1623329c80950cd478a892977adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:0a:8a:80:c8:f4:21:dd:cd:8e:7d:4f:1a:
                    8d:ff:a8:de:ca:45:b1:07:7f:92:0a:58:97:95:af:
                    9c:48:95:ce:9e:47:83:62:e9:ea:ed:bd:21:7c:a5:
                    03:be:a3:b0:34:e6:4f:5a:53:45:fd:3f:5a:23:d9:
                    0c:a7:3f:81:4d:bd:06:99:00:44:ac:26:37:a8:bb:
                    bc:eb:ad:b1:29:b3:59:5f:8d:4a:21:22:3f:65:5e:
                    8b:69:0c:aa:ee:ce:86:9c:18:9b:cf:e5:bb:5a:30:
                    92:c5:dd:37:8d:3c:04:18:cc:5f:41:de:92:a2:86:
                    a3:4a:45:20:bd:bf:e9:b3:91:c2:35:e8:e4:48:b0:
                    82:04:4c:6a:c5:93:d5:69:94:85:05:cc:a1:17:a0:
                    d9:6c:52:f5:77:4d:8d:3f:d2:d6:5a:cf:2b:40:8b:
                    bf:5e:83:98:0b:eb:17:38:43:c7:4d:69:e5:80:1a:
                    94:9d:ec:2d:1f:d0:e3:70:db:cd:35:a1:ca:49:af:
                    a0:e6:09:96:16:31:d1:15:e9:9c:96:58:1d:1d:26:
                    81:fa:bf:96:1d:d2:6c:5d:d7:f3:d0:d9:cc:f9:bb:
                    6b:db:e7:19:a2:fa:04:90:5e:37:ab:f7:d8:96:3b:
                    88:d7:fd:9a:6b:87:fa:6e:ee:fd:88:3f:4f:c0:fd:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:8B:93:EB:AC:16:23:32:9C:80:95:0C:D4:78:A8:92:97:7A:DB
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:69:a6:be:57:26:7e:bc:5b:b8:9d:34:89:7e:05:96:01:1f:
         d0:e1:54:cf:a0:27:5f:e7:d5:73:4f:24:e8:75:78:ef:b8:21:
         dc:40:90:52:ca:b2:8c:c1:62:1d:e1:37:4d:85:ef:29:fc:b6:
         2a:ac:22:17:72:c6:94:e0:1c:f1:f0:dd:50:f7:a6:4f:f2:82:
         dc:04:ea:5c:0e:64:18:8c:8b:2d:d3:32:1c:ba:ce:38:76:fd:
         9e:f4:4e:f5:58:5e:ee:00:39:e0:81:6a:74:c6:c9:96:2d:20:
         93:24:cf:eb:54:06:d9:e9:ab:7e:48:7c:70:87:96:b6:55:e7:
         81:73:9f:54:79:95:68:b0:0a:6b:f3:b8:31:15:8c:e0:1b:47:
         57:fc:ec:81:75:09:e1:0e:e8:0a:bd:cb:6c:47:f1:80:3e:8f:
         a9:2a:a5:b4:9e:db:d9:5d:96:27:27:9a:ac:e6:80:80:91:b3:
         08:a5:99:e1:5b:46:92:4d:a6:29:aa:5c:d0:5e:5e:87:0f:30:
         a7:dd:47:f7:f9:42:fe:06:a7:f6:2d:af:7e:92:41:be:66:13:
         0e:96:0c:be:8f:3e:02:39:62:88:9f:d4:d1:32:0e:ee:90:5a:
         0a:32:0f:87:0c:68:b6:d3:a8:60:c2:15:bc:c0:8f:26:39:e7:
         4f:f7:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----