Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          7F1m14OiKJws+Lfn/Rs0lCmIqMG9kfLbrkGeGrfKfFI=
Subject key identifier:   19:8C:63:D5:C2:BB:42:1C:C8:26:68:24:91:C8:75:AA:77:92:95:56
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       01962F067E1AF46E3C668764EFACD76A70FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          13E9
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: 0b3K/oxeDixnvYgQgsIoQ3oT04H10sOb2tL2sldIQK8=)
                          2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7e:1a:f4:6e:3c:66:87:64:ef:ac:d7:6a:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=198c63d5c2bb421cc826682491c875aa77929556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:ac:60:bb:8c:80:8f:78:c3:11:d9:47:e9:
                    a8:c1:00:ac:d8:2d:cf:95:e2:82:c8:6a:32:62:d4:
                    c8:f7:cd:e4:35:cb:9f:23:0d:cb:f1:71:55:6e:f8:
                    44:c6:46:5e:92:49:75:c2:70:b4:45:fa:8a:65:a6:
                    2e:28:0a:b0:12:81:2e:f7:be:90:b3:a1:a1:10:5d:
                    68:91:b4:3a:25:b6:f5:19:a1:7d:aa:31:28:5d:04:
                    07:46:22:9b:42:a5:0a:bc:9c:dd:ae:2c:5f:6b:35:
                    02:7a:84:2b:fe:81:9d:7f:b3:d5:a4:04:43:5d:a0:
                    1a:85:7b:61:48:cf:58:f4:0f:03:34:92:a4:60:d9:
                    49:f3:0e:c6:05:a5:eb:5d:1c:59:41:15:6e:c5:d2:
                    6b:a2:ae:1b:c4:d7:93:8c:d0:58:10:ce:15:4a:cf:
                    19:78:80:61:fe:ce:25:d2:f9:69:6f:47:ff:e1:25:
                    9c:11:58:5b:eb:04:76:d5:2b:1c:3a:9b:b3:ce:08:
                    9c:56:08:0d:42:79:32:11:0f:46:af:4a:f5:f3:cc:
                    56:39:7f:f9:e0:c6:2d:72:92:49:1a:6e:0d:a6:a6:
                    05:ee:9a:58:49:5a:d6:da:2d:61:28:5b:90:ec:15:
                    f5:c5:a1:57:0c:b5:6a:69:47:b2:74:d9:49:87:ed:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:63:D5:C2:BB:42:1C:C8:26:68:24:91:C8:75:AA:77:92:95:56
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:47:f1:df:f0:6c:b4:39:a9:19:30:16:43:63:c6:b9:7f:
         0e:f0:45:f0:25:fa:fb:bf:1b:16:d4:ba:41:61:42:6d:70:67:
         06:50:f7:42:a1:30:97:ef:b3:d7:c6:d1:e3:8f:d9:f4:25:1d:
         8d:3b:71:13:3e:91:36:41:d6:c2:7a:ee:74:5b:fc:00:fa:e7:
         c5:ed:88:b8:83:ea:54:48:cd:b8:e6:16:be:d3:22:a9:f7:d0:
         0b:61:39:fb:d9:d7:3b:ab:55:b5:fc:01:ee:6b:1a:8d:ce:c9:
         56:09:0c:48:8b:95:a2:56:ba:43:01:95:0f:a3:bf:cf:a7:a8:
         56:01:dd:f9:ec:23:18:a6:9c:84:27:35:52:d0:5f:92:f7:71:
         79:e4:7b:a4:fa:ba:35:7e:34:36:0c:58:25:9c:26:f7:ec:1d:
         86:08:7b:88:3f:fc:e2:a1:3d:30:6d:31:a5:e6:07:33:24:10:
         79:86:78:be:fc:88:b7:a3:3f:13:c3:8c:12:bc:65:f6:0b:b0:
         f9:52:0b:94:dc:73:7d:96:e5:7e:e8:8b:6d:f3:89:50:9b:26:
         69:8f:fb:bf:83:32:14:5d:9f:f2:b9:b8:28:c7:4f:69:4b:6e:
         89:3d:33:7e:bb:e7:22:8f:75:f6:4c:91:cd:43:45:0e:1e:06:
         57:6c:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----