Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File:                     XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier:          KoMlTvvKwHl8Cmtjw1VPkzmlLrZOTbaaAcVYuu3yWnk=
Subject key identifier:   B3:FF:8F:4B:E9:A6:21:E0:F8:D8:F5:5D:B2:E1:C5:54:F1:EF:1F:E2
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer:       /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial:       01962DF3E97B5C6ED795584BF52752A6EA52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number:          01D1
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: P7g82oQa9maLUZf-zyJXFEwQ_Tk.roa (hash: R1Jxxc/Qby3IEt4xnho0adyCsC1rCUaoaz24WlyrPXE=)
                          2: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: sws2UgKWNz5wl8OQLryKD9Rk6UE8Ic6/k5RhIJDR9dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e9:7b:5c:6e:d7:95:58:4b:f5:27:52:a6:ea:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=b3ff8f4be9a621e0f8d8f55db2e1c554f1ef1fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:7c:c2:57:53:30:be:d3:a6:a3:1c:a8:e6:
                    21:b8:de:e2:9f:d2:b9:00:2d:da:74:ed:dd:d9:13:
                    33:78:5c:4f:1f:51:a0:7b:23:46:29:47:f9:84:59:
                    64:89:a1:01:00:dd:5f:41:ca:fa:9d:e9:23:6d:35:
                    da:25:c3:57:97:c6:49:0c:6b:83:32:f2:5a:7c:a6:
                    62:28:79:23:49:09:ee:2b:ee:53:a0:50:be:f0:56:
                    06:60:68:45:3e:34:5c:13:2e:0f:6d:f0:7a:90:c1:
                    bf:6d:42:13:8d:ba:49:87:52:f1:4d:53:0a:1f:f6:
                    f2:78:5b:04:e5:6d:f6:d7:cd:00:6f:80:b9:f6:da:
                    0f:70:f0:22:98:8c:73:98:c8:05:d2:bb:92:72:7f:
                    4c:d5:ab:0e:8c:1f:b4:40:2e:18:a7:f4:46:ea:90:
                    1d:31:f1:af:fb:87:b6:b9:f7:bc:25:1a:55:ec:fb:
                    69:09:8d:e4:ba:21:ac:7f:a8:ad:0d:d9:c1:f8:10:
                    92:f1:41:bd:5a:8d:c5:04:13:1c:32:ba:4a:25:82:
                    50:71:c5:4b:27:e0:a5:11:a9:2e:e9:c0:44:13:b3:
                    95:4f:cd:5a:e1:32:15:2c:6f:6e:21:89:7c:65:1e:
                    a6:89:06:bb:c7:11:14:45:46:a3:1e:06:5e:57:d0:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:8F:4B:E9:A6:21:E0:F8:D8:F5:5D:B2:E1:C5:54:F1:EF:1F:E2
            X509v3 Authority Key Identifier:
                keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:c9:6c:75:c3:04:78:36:fd:de:c5:18:86:0b:0f:59:fc:
         0b:5d:d6:91:0d:61:de:32:8b:57:ac:f0:9c:95:5b:f6:8d:8b:
         86:5f:08:ef:5b:47:52:9a:37:b6:1b:b3:20:bf:91:27:ca:ed:
         ed:19:17:6b:27:4e:84:d7:34:f6:56:22:03:0d:d3:cf:b8:54:
         1f:09:fe:6c:1c:77:f9:b9:c5:92:de:cd:c2:12:00:f3:de:54:
         c4:08:3b:1d:5b:64:92:3c:81:dd:f9:40:01:a2:b5:8f:71:56:
         37:af:ca:e3:f2:b3:b4:4f:8c:c8:f8:db:6b:9d:de:cf:d3:2f:
         b9:7a:35:fc:56:79:ec:27:65:5e:f9:ac:c3:44:fc:14:29:02:
         a4:e3:97:a6:d5:1e:fe:94:53:85:c0:93:dd:11:b5:34:fd:e1:
         58:eb:b3:e4:7b:b3:a5:3e:fb:17:2a:8b:be:1d:34:ec:45:12:
         02:a6:68:e0:f8:c7:1d:64:ae:c8:e2:01:bb:c5:5c:73:78:63:
         5a:50:40:89:7d:7f:1a:29:04:2e:b9:9e:a2:cd:1c:21:bc:59:
         49:56:4a:bf:64:71:72:02:2c:2e:70:01:f9:be:a9:3e:85:74:
         7b:d7:70:07:a9:f2:59:b2:ae:a6:84:7e:bf:1a:62:0d:65:f9:
         71:60:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----