Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File:                     X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier:          VG9+xSuPyRU1zmA5Rz33dbXnORzxBWkr+j8T1zbByCE=
Subject key identifier:   EF:CA:E3:B0:0C:64:4E:97:7D:F7:15:BC:8A:29:64:96:8F:CA:F8:07
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer:       /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial:       01962ECF6227078785C1E141FFB09D9FB570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number:          08DA
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
                          2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: xdZvh7jSs1hSqjlItmbRN73Csky9AqTNtZc3xNCay/8=)
                          3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:27:07:87:85:c1:e1:41:ff:b0:9d:9f:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=efcae3b00c644e977df715bc8a2964968fcaf807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:e6:9b:5f:18:22:48:b6:d1:b3:4b:0e:e2:
                    f2:aa:eb:5f:b1:61:de:a1:13:25:20:6f:73:d4:3a:
                    9c:23:bd:84:a3:6d:12:39:fd:05:f7:8f:06:8f:fa:
                    1e:1e:a2:f2:6b:9f:33:79:28:3b:6f:81:b6:ea:34:
                    7c:b1:36:15:19:cd:ce:9e:d7:6a:07:e0:7d:b3:fe:
                    da:20:0c:3c:59:17:b1:06:7b:55:4e:3e:f2:c9:e2:
                    71:72:51:4e:e1:a4:b0:95:c0:94:c7:76:9c:6f:05:
                    bf:8b:df:0d:fc:d3:12:96:72:2b:cd:fb:d2:47:74:
                    57:4d:a2:53:0b:08:74:12:73:38:6b:44:25:bc:8d:
                    83:18:c0:1f:dd:b6:00:1c:5b:4c:fb:79:c5:56:5f:
                    37:34:2e:a1:01:3b:0c:fb:ee:24:ad:28:4e:22:81:
                    da:53:b7:8c:19:e3:3d:8f:2a:f6:60:e7:7e:37:1d:
                    5e:54:6e:2a:7e:23:b3:57:33:19:35:73:4a:5d:ab:
                    79:1b:f0:44:7c:f1:c2:b1:c4:a0:61:0e:5c:98:37:
                    27:bd:ba:e4:3e:1c:40:c6:56:5f:96:81:b9:da:af:
                    3c:10:20:b1:00:a3:75:05:83:48:17:5e:d2:cd:fe:
                    7e:c6:9c:17:26:f7:31:23:80:30:f7:02:ba:07:ea:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:E3:B0:0C:64:4E:97:7D:F7:15:BC:8A:29:64:96:8F:CA:F8:07
            X509v3 Authority Key Identifier:
                keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:e9:99:dc:3f:16:00:b1:ac:cb:cc:17:c0:09:55:00:26:
         c6:1a:73:ad:64:76:08:da:03:78:c3:89:33:9f:01:b7:a0:6b:
         9f:1d:5e:58:db:80:d7:21:38:42:bd:dc:85:e5:4d:8a:e9:5a:
         99:a7:d6:0d:78:af:02:72:47:4f:d6:53:84:71:97:24:0a:b5:
         71:4b:ba:79:83:85:4d:5e:0a:e9:83:e6:ff:cc:67:52:97:15:
         a4:0f:32:b6:aa:3e:72:7f:75:21:c6:e7:68:30:4f:4f:f5:20:
         4d:1a:f9:61:13:a5:0a:03:bd:71:e1:7f:de:39:b5:f8:e4:24:
         0a:f4:f8:7a:e1:25:27:4e:6c:ba:61:73:82:df:c8:aa:5e:ae:
         f1:85:84:cf:d0:64:35:ca:5c:44:26:83:4e:aa:40:e2:ab:39:
         20:f7:b8:09:c6:f5:53:fb:4f:95:d9:37:de:e8:dd:60:ec:ac:
         a4:a1:66:89:33:7a:ca:dc:70:8a:b7:9e:6e:66:76:7a:c8:d7:
         0d:dd:0b:19:d1:61:d8:b5:68:bf:70:bd:4f:60:6e:b6:cd:65:
         47:ad:fc:f7:06:a6:6b:b5:32:d8:4c:24:af:22:a4:59:4d:48:
         ca:fa:9a:4b:57:fe:41:e2:89:5f:fc:06:31:1e:e1:5c:ee:32:
         6a:32:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----