Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File:                     XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier:          m+jUZQ8c/3zon53r1N+ANZsHMJL226wNJUGNxoESTRA=
Subject key identifier:   67:59:C1:CA:1B:FA:2E:06:83:18:46:3B:5B:5A:52:51:48:9D:3A:FF
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer:       /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial:       01962E98AC76E978BF0BDE86D8A6526315E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: f+ChmtHwqvYuaymhUNwSJaudXz5yUqJHOyhQ3hoCa/g=)
                          2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ac:76:e9:78:bf:0b:de:86:d8:a6:52:63:15:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=6759c1ca1bfa2e068318463b5b5a5251489d3aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:5f:4f:12:f1:91:b3:42:bc:f4:f5:77:f2:
                    0d:d8:f4:03:a1:ec:2d:8b:af:52:ca:27:ee:d6:69:
                    c6:1d:6c:90:14:43:c4:a3:61:7a:3d:eb:bd:0c:4f:
                    7b:25:9c:04:f1:d0:cb:b2:00:39:ac:48:d0:12:f2:
                    ec:a6:4b:f0:fc:03:0a:c3:ba:bc:19:b9:26:dd:cb:
                    af:2f:7f:54:87:24:21:fd:46:f8:c1:3b:c7:a9:c8:
                    f5:a5:ac:90:e2:4f:f5:db:47:86:f3:e2:6f:16:cd:
                    40:43:a3:1e:3f:d9:d8:fc:73:ee:ae:f9:f0:ab:9e:
                    3f:4f:c0:ad:b4:f1:50:ba:cb:cf:b8:cf:6a:ab:ff:
                    3f:ac:5b:e7:e6:bf:be:fc:7b:d7:71:cb:39:b9:7e:
                    85:96:25:7b:87:fd:26:07:51:70:9b:47:c8:54:e1:
                    de:25:8a:cd:4e:31:03:c6:22:83:ef:db:fd:64:c3:
                    06:08:ad:b6:4a:98:63:b1:f2:9e:40:49:63:26:7f:
                    ee:3a:61:a3:dc:8f:35:06:10:67:b4:c3:f4:19:a1:
                    8e:be:63:7b:c6:03:36:41:ee:9a:8e:b7:60:87:e1:
                    a3:e8:19:17:57:09:58:83:aa:69:e1:50:46:c0:6c:
                    0b:fb:49:be:25:2e:e6:f4:e6:42:a4:bc:22:56:8a:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:59:C1:CA:1B:FA:2E:06:83:18:46:3B:5B:5A:52:51:48:9D:3A:FF
            X509v3 Authority Key Identifier:
                keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:49:7d:00:ca:3c:cd:9c:45:29:e5:69:e5:e5:39:72:c2:
         a9:38:13:03:b8:60:e9:2c:53:33:9c:af:c2:63:ea:47:d9:f2:
         06:50:2f:de:d4:6c:61:bf:57:14:4b:6d:55:17:c8:c1:a7:f5:
         72:d7:5f:24:1d:6d:43:e6:25:9e:1e:51:4f:70:e8:f7:c8:01:
         66:52:3d:4d:36:a9:62:2f:89:9c:48:0d:33:02:09:57:ee:3d:
         69:16:d8:e5:40:8e:69:d9:a3:a6:78:01:fd:0b:9d:97:00:fa:
         b5:3d:c5:24:65:38:a5:3f:84:a2:a3:b8:35:a9:b0:e7:cd:c5:
         6b:28:bf:af:83:24:59:0e:5c:3e:64:7b:0c:58:a4:3c:5d:e5:
         6a:c0:a7:c7:b4:5d:e7:59:c8:2e:ef:1a:ce:d8:05:6c:9f:a9:
         51:31:23:f5:fd:ee:06:29:56:81:33:e7:7f:67:af:69:d0:f2:
         c1:fd:8c:43:61:40:1c:a7:50:d4:bc:60:bb:09:e1:08:9d:2c:
         40:8a:03:85:f3:0e:42:3e:4f:1f:32:25:47:c9:69:0c:29:63:
         16:5d:e2:db:25:d7:60:d4:9b:37:fe:43:ce:20:a5:da:a5:8c:
         f1:f1:e0:da:3b:28:af:00:77:9d:7c:0b:1a:89:f3:88:a3:48:
         0c:f4:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----