Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File:                     xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier:          ck4h44okDQzyIo74Yw0JXS4quq1TzM8DohL/vYB2Xfs=
Subject key identifier:   86:78:97:D8:64:B1:B0:AF:2C:12:D2:5D:3E:0E:B2:C1:C4:24:D0:45
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer:       /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial:       01962E98A36D26B4F7D47417D04B6D493A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number:          10A8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
                          2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
                          3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: QEjYCVsmS6I52W3wOB8wPBwMB/BNjfZHEKuSgROjNGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:6d:26:b4:f7:d4:74:17:d0:4b:6d:49:3a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=867897d864b1b0af2c12d25d3e0eb2c1c424d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:34:cf:95:b3:29:f9:75:85:31:c6:5f:26:
                    23:ec:f4:44:36:ae:4b:8c:d5:3b:78:dd:47:eb:3a:
                    0b:f0:a2:a5:8b:c1:21:c2:ee:ae:f3:2b:9f:be:17:
                    ce:99:b5:09:66:21:79:9f:2b:8e:5d:a4:da:73:57:
                    a2:23:6e:29:0b:8b:8c:73:9f:9a:ca:f5:b5:4b:12:
                    81:75:50:0e:aa:c2:23:7d:9c:ff:b9:a3:d3:fb:fb:
                    95:2a:d1:47:c5:41:9d:09:34:e0:09:bb:23:69:69:
                    96:21:64:47:a0:e8:06:78:fe:7a:32:65:40:bd:73:
                    d6:af:d2:c9:a1:ce:d0:21:4e:73:cb:b1:99:7b:8e:
                    97:b3:69:7d:03:a4:1b:17:2e:49:a8:45:cf:05:61:
                    bb:3c:f5:5b:d6:81:a0:c2:d3:53:81:8f:7d:c4:4e:
                    51:49:8a:17:57:0c:28:20:c7:22:c9:51:a6:05:ba:
                    98:3f:7b:fe:bd:29:a7:39:e1:cb:53:3b:0a:2e:c2:
                    9a:4e:0e:10:0d:f1:47:bc:66:38:ac:68:fd:46:6a:
                    83:78:50:e9:f4:22:a1:82:d8:00:41:bc:25:40:c4:
                    bb:eb:22:87:7c:e5:4d:ae:c9:2f:a7:78:d5:9f:8e:
                    ed:fe:b0:7c:80:65:8c:ce:6b:bf:e3:05:20:68:15:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:97:D8:64:B1:B0:AF:2C:12:D2:5D:3E:0E:B2:C1:C4:24:D0:45
            X509v3 Authority Key Identifier:
                keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:63:e9:4b:20:96:b2:5b:33:d2:2e:04:d2:22:bd:dd:27:
         dd:9a:5c:75:64:c6:9b:ca:d6:b5:5e:e0:64:d5:db:81:83:0a:
         1c:ee:28:57:fd:61:36:1c:7b:c3:b6:56:03:d7:0f:b4:f3:a2:
         6e:2a:25:75:c2:13:b0:56:20:d1:f9:56:27:fa:f1:21:90:1e:
         06:3e:7a:df:99:71:68:54:bb:28:75:db:01:32:9c:19:30:ca:
         c1:2a:17:e6:19:5e:7c:94:d1:03:20:d2:a7:6c:5b:45:07:54:
         1e:ca:b2:42:27:a5:48:4a:6a:89:e9:cc:81:eb:f0:4c:07:4e:
         3f:88:1a:f1:b6:aa:21:54:d4:0c:46:da:49:02:d7:41:41:3c:
         e2:0f:49:46:e9:bb:18:2d:a8:28:3b:fd:55:15:e5:0b:ad:e3:
         dd:78:3c:e7:3c:ab:95:01:cc:ff:d2:6e:db:3f:28:1e:7d:6d:
         ce:d2:75:17:ed:c5:11:82:41:17:c9:a0:ec:a1:b2:3e:04:e2:
         c3:f3:95:d8:4d:03:11:da:0e:ed:b3:bc:4c:6f:34:c4:59:be:
         27:29:32:28:d6:21:7b:62:c0:41:38:46:2b:60:15:93:b4:7f:
         3f:ef:f3:bc:7f:8b:dd:2d:0d:bb:7a:e6:ee:b5:63:8b:2b:e6:
         35:b6:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----