Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File:                     xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier:          uv1sbzlaEHGbZwPxwit6MUcTTXWl1k+Z4ZeNk0mPkgQ=
Subject key identifier:   8D:DF:7C:62:CC:0D:2A:9D:A3:75:3B:DB:71:33:71:AC:E2:52:D3:33
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer:       /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial:       01962FAB318A3DAB6EDE8492B8F5021AF92A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
                          2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: 3ZFkE8KznSCmzITqB8lHbjIrTruS9B08+z6TypN8HFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:31:8a:3d:ab:6e:de:84:92:b8:f5:02:1a:f9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=8ddf7c62cc0d2a9da3753bdb713371ace252d333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:4f:7a:db:e0:7b:f4:55:14:74:91:61:b3:
                    6a:2c:b8:91:1d:9e:94:c9:19:57:01:6b:17:cc:a9:
                    48:3b:06:ab:27:3a:e1:8e:34:3c:6f:3b:a0:5b:6f:
                    dc:84:17:31:67:1e:60:82:1c:cd:58:64:d6:59:f7:
                    8d:74:77:e7:1c:3c:ca:96:67:c0:4d:3b:ba:a7:62:
                    58:28:64:90:4d:3f:00:73:ea:e5:88:b4:86:3d:25:
                    00:5f:bb:f0:29:a8:c0:5c:0d:a1:2f:4b:10:f8:9a:
                    d7:4e:56:c7:96:1d:4e:5c:47:2b:3c:ca:b1:e4:da:
                    d9:ef:20:ff:f9:a3:27:a0:4f:ab:94:6c:77:45:dd:
                    60:42:86:bc:34:9a:89:47:5d:64:39:72:8e:6d:37:
                    21:ed:f4:59:2a:b5:2c:b1:8e:76:f7:6a:0b:a8:00:
                    4f:5f:45:40:db:0d:55:4e:96:e1:88:c9:0a:16:77:
                    e0:5e:99:c1:74:27:8f:c0:7e:b0:4c:4a:a5:97:62:
                    69:7c:d0:e5:8c:c2:0d:35:97:1b:40:28:ce:b5:cb:
                    4e:73:26:52:5d:ab:39:22:f2:07:3f:fd:a9:17:cc:
                    9a:ce:eb:3d:c4:74:8e:9f:f9:17:be:aa:0b:7b:92:
                    a4:14:5d:f0:89:ba:37:96:bf:d2:1e:32:04:4c:63:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:7C:62:CC:0D:2A:9D:A3:75:3B:DB:71:33:71:AC:E2:52:D3:33
            X509v3 Authority Key Identifier:
                keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:82:a3:9b:43:be:2c:f6:da:dd:2d:f5:77:ff:0e:d4:e8:
         e7:90:13:5d:80:5a:e5:81:ea:57:ba:3f:76:7c:b0:56:15:59:
         dd:63:c9:81:6b:8d:b1:3e:76:cc:69:9d:28:64:dc:5a:ed:0c:
         96:94:28:8d:a6:ec:41:a2:4f:69:15:e7:13:de:c2:ec:96:7e:
         26:1a:6d:2d:af:bc:b7:a4:89:79:16:8d:5f:8a:74:54:cc:7c:
         ab:81:43:50:71:c1:01:1a:56:c1:a1:d2:63:62:ac:ed:49:fd:
         73:12:ef:87:f1:19:ac:32:3f:a6:a2:d6:7e:69:cb:72:2d:ea:
         94:c6:42:75:8a:9f:3a:e8:fa:05:5c:9c:58:c9:b3:d4:3a:a7:
         63:53:b3:fd:dc:af:9c:2d:74:9c:43:7c:43:aa:20:51:ff:82:
         b0:9e:f8:d2:fd:76:0a:5c:e6:08:ee:c3:dd:4a:55:9c:cc:ec:
         7b:ca:3b:f3:bf:79:0a:89:82:9f:fb:61:17:5b:26:65:e2:60:
         0d:fc:a8:17:bc:63:25:9d:25:17:72:bf:ea:10:b1:83:a8:91:
         8d:70:be:90:08:7d:12:61:56:96:8b:9e:c1:64:79:7b:3d:2f:
         88:ed:42:87:8e:52:c1:0d:fa:f8:46:09:4a:49:9e:59:e7:7f:
         fa:ea:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----