Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File:                     XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier:          zyUUjayYqPzmgLEWc82Mbx67Bb0TwmykAVj12jxVy6s=
Subject key identifier:   DD:F3:1B:7A:55:B9:8B:88:31:13:21:52:D2:67:64:86:36:76:6C:7E
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer:       /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial:       01962F06AF1AB40B6F006668E5C6F9372D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number:          080C
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: bNiEm9coux61lrNSLulg+Yo3aI/s3N2Fu5Rtv0g2vtM=)
                          2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:1a:b4:0b:6f:00:66:68:e5:c6:f9:37:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=ddf31b7a55b98b8831132152d267648636766c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:e3:40:83:20:6e:48:3d:1d:8b:02:0a:38:
                    3d:05:6b:ae:b8:56:df:7a:a2:fd:17:12:da:8a:a5:
                    f5:5e:28:71:4e:76:bb:6f:c8:a6:9c:d9:08:a8:ee:
                    23:29:b8:50:2f:e6:01:78:ac:1d:ec:e4:a6:30:f2:
                    2d:ed:3e:24:fa:fa:13:c0:f9:14:85:fb:75:6b:91:
                    24:b1:20:b1:0f:c0:9a:cf:c8:ff:ca:cb:0d:24:ed:
                    2e:01:17:5a:3f:92:81:2f:55:45:ac:f2:76:90:d6:
                    bf:e8:6d:62:7b:70:d8:c9:b1:5d:b9:2f:10:48:2e:
                    0a:83:0f:0f:43:56:d4:c8:db:db:62:f9:a3:00:8f:
                    20:1c:ee:e8:a1:da:6d:5b:0b:4a:c9:a5:cb:43:64:
                    a5:c9:06:51:8b:9f:4d:49:cc:04:61:05:e5:61:ce:
                    31:9f:b9:76:51:00:39:22:d4:fb:69:fc:e1:4f:49:
                    29:a7:e2:68:06:f6:fc:2f:1c:0a:15:c5:46:cd:08:
                    64:6a:ab:23:d6:46:da:e7:a8:3f:9c:cf:3a:5e:4a:
                    de:e2:d2:46:32:7d:a4:1f:a9:f6:9f:ed:12:70:19:
                    5f:d4:27:c0:eb:ca:7d:67:de:ff:a4:fb:9c:ea:28:
                    2e:fa:b3:c9:ad:98:41:6f:2d:70:b1:6e:34:7c:25:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:1B:7A:55:B9:8B:88:31:13:21:52:D2:67:64:86:36:76:6C:7E
            X509v3 Authority Key Identifier:
                keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:de:b0:09:d2:29:bd:23:86:66:da:23:21:26:d8:d3:46:8e:
         7c:e5:06:e6:44:43:2d:f8:5d:71:89:0c:fc:05:d3:5f:8b:51:
         0d:3a:9e:ab:ba:27:d4:c4:41:f5:23:05:a9:c5:75:e1:5f:33:
         81:74:c1:67:05:3b:5f:dc:9a:03:d1:ae:f4:43:65:6d:bd:b6:
         36:42:ba:50:fb:72:a8:37:d7:62:d1:37:2e:d8:7f:94:da:99:
         b7:63:e4:31:61:4e:71:36:96:58:5b:dd:1a:50:6b:ce:7b:8a:
         da:53:37:d0:78:c6:da:1a:27:72:d5:53:f4:44:25:61:18:d1:
         ee:f8:f9:17:a0:a3:cb:e8:d5:e3:2c:11:d2:22:a3:09:f8:06:
         a4:f1:88:86:cb:0f:bd:3a:7e:e6:32:f4:97:ed:e6:59:67:d3:
         10:35:77:6e:5c:3f:1c:b4:6d:17:86:0e:02:a6:af:de:9f:b0:
         b5:7c:93:e7:c2:ea:8a:95:df:c4:53:97:99:12:91:70:61:65:
         e2:34:5e:fc:cb:73:fe:2e:1c:9d:21:f9:09:75:b7:98:bd:e9:
         22:54:84:47:81:49:26:32:84:41:6a:92:45:70:4d:f8:4f:3d:
         84:22:90:5c:3d:95:e3:d3:26:21:87:a7:ac:da:0a:fc:97:11:
         7f:d3:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----