Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          KgT3q7NmqudTsJ6TgG5fM34es3KjnxUsNTf8vjQ/C/M=
Subject key identifier:   2C:8F:54:53:CC:0D:6E:6D:33:EF:55:FD:D7:2C:8D:DD:1D:9A:68:62
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01962F74D06EFAA65000681D48415CCE68C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          0462
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
                          2: JMRiqmtTwU851Z4KNRCnaHqyNnI.roa (hash: BGsTqMatG4nYY4lxrSbOOHfLU0fqm0JVVfL2eISXhbY=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: jX9YndEXsrvETRdS+pV+z4O9RlU5n5/K5ucG4e6DaKM=)
                          4: e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa (hash: Mu/lJwVbh/1+u4MzgbLDi3M1S5lCY4Q0nFxdiOF7I28=)
                          5: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:6e:fa:a6:50:00:68:1d:48:41:5c:ce:68:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=2c8f5453cc0d6e6d33ef55fdd72c8ddd1d9a6862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:fd:aa:36:7a:3a:1c:ce:82:9f:92:33:4e:
                    de:bd:6d:a9:ce:ce:7b:5f:a7:bf:52:6c:86:1d:8b:
                    b6:11:b9:88:7e:80:c7:b4:66:c5:bb:e5:8d:b7:2f:
                    05:64:7e:50:30:f6:9a:48:6f:1c:00:ad:62:57:37:
                    5d:09:c7:49:8f:6e:c3:75:6c:3a:26:31:8e:b6:5d:
                    8c:d2:90:d7:d0:5d:29:79:57:7e:39:48:4e:ea:15:
                    2d:35:a9:4d:65:3a:fe:e1:03:39:be:7c:4c:8d:98:
                    2d:44:62:b9:17:37:56:b5:ab:fa:f9:9c:3b:09:01:
                    ac:b3:e1:27:52:27:0e:b0:6e:8b:94:ab:ed:b7:4e:
                    4d:ea:7b:c6:33:8f:14:08:86:4d:ca:91:f8:55:54:
                    46:ab:97:32:4b:78:6f:9d:a0:41:cd:a2:89:ad:b6:
                    eb:f1:28:dc:44:a8:f4:10:c1:41:11:d8:19:1e:02:
                    d7:a4:8f:2b:54:f7:ef:b9:60:be:cf:9a:e5:69:8e:
                    86:5b:d8:72:73:e3:2e:b9:ab:4c:27:b4:89:da:df:
                    16:19:bd:a5:ac:b6:d2:49:1b:19:c3:7d:6a:06:33:
                    41:b8:24:35:38:ab:49:c6:ca:2f:34:09:76:12:dc:
                    3b:a2:74:e1:bd:03:f7:3a:50:2a:16:c3:6f:e9:62:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:54:53:CC:0D:6E:6D:33:EF:55:FD:D7:2C:8D:DD:1D:9A:68:62
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:f2:d6:84:58:6c:32:d2:d6:fb:85:8a:06:d9:ca:22:72:
         05:dc:70:57:5f:bf:a3:8b:c5:5f:9c:09:12:7a:a9:35:cd:86:
         02:26:14:0e:61:c1:a5:26:c9:d4:27:e6:56:ce:fd:d5:b1:90:
         b8:3d:43:7a:e3:17:02:87:95:78:02:2e:44:4b:c1:b3:29:5b:
         7a:9d:e2:5e:ac:d4:70:0c:d0:33:4a:48:71:e9:8f:ac:b2:95:
         ee:3f:5d:8c:b6:7d:0f:ff:47:55:46:01:a7:32:fe:46:c4:a0:
         58:92:84:4c:5a:48:03:6a:c5:3f:0a:b5:e1:14:16:ea:08:15:
         0d:3b:65:7d:71:b2:6a:92:6f:db:4c:1d:90:8d:3e:7c:27:b2:
         12:e9:81:b7:a3:b6:27:29:63:9e:6f:2b:fc:a1:8a:6a:57:ab:
         87:31:8d:46:32:68:3e:b9:fe:4f:2a:71:5e:42:c7:dc:47:0c:
         2c:51:0e:b0:c9:73:cc:d5:a7:8c:9c:91:e5:9b:53:f5:a3:33:
         e3:e2:ba:a9:d2:b8:bc:38:a7:79:08:f7:56:22:e3:db:3d:37:
         ee:15:2b:e3:96:85:a7:57:8f:5d:8a:79:d0:62:24:0d:51:f4:
         14:6a:7c:d5:04:8e:6e:de:3b:c1:0f:21:62:f5:2b:38:16:3a:
         6f:d9:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----