Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File:                     XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier:          wYqtg+eV8IpM3m/5FEZ+WkG1JL+pwE+nLQvfX9kncJI=
Subject key identifier:   61:35:4C:99:F9:84:7C:6E:56:99:90:FF:24:A2:F9:68:A0:7A:C0:30
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer:       /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial:       01962F7478C2834A1A7AF740AD46F0158690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
                          2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: TZ0uc+jok8KwJ9C5NS32HvjZ2vH7fg4NAvm5I3pv5pE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:78:c2:83:4a:1a:7a:f7:40:ad:46:f0:15:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=61354c99f9847c6e569990ff24a2f968a07ac030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:1c:38:2c:3e:69:28:02:1c:6e:7d:dd:ad:
                    c7:c4:07:5f:39:fe:da:93:db:a8:b5:94:82:2f:d0:
                    89:42:eb:ca:dc:a4:a1:6a:78:6d:ba:79:f5:eb:cf:
                    ba:bd:5a:57:d1:d7:63:19:32:b9:62:a4:0d:e9:23:
                    56:9a:12:a3:e5:91:51:11:9d:90:43:6b:75:61:0a:
                    b2:31:18:53:a3:4b:9e:11:b0:e4:6e:0c:a2:a6:b7:
                    1e:76:19:b7:b5:6c:1e:69:55:a8:36:24:9c:c6:8a:
                    35:e0:b8:ac:28:25:98:19:8b:94:67:5a:8a:ef:bf:
                    6a:d6:c8:f0:89:8d:b9:a2:61:e0:60:f1:91:6a:c5:
                    59:d8:4e:e4:29:1d:c6:03:00:eb:e5:82:9b:da:4d:
                    13:e5:9d:c3:bd:10:69:7e:3e:fb:b6:ff:06:dc:e9:
                    b9:7b:a4:7d:86:e7:25:35:33:5a:36:37:83:5f:c1:
                    cc:87:51:54:61:10:9f:ca:4f:73:34:dc:6e:83:2a:
                    2b:a2:d3:2b:d7:4c:36:a2:81:96:dc:92:34:bd:55:
                    53:07:25:2c:9f:98:0c:3c:dc:be:e4:2c:d8:e6:46:
                    a2:79:88:56:d2:64:af:5b:12:bf:b8:aa:b6:41:70:
                    4a:18:2b:67:a0:21:ab:f3:11:da:2a:d0:54:6a:ff:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:35:4C:99:F9:84:7C:6E:56:99:90:FF:24:A2:F9:68:A0:7A:C0:30
            X509v3 Authority Key Identifier:
                keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:14:57:12:cd:58:ab:b0:19:b4:ca:a5:db:4b:8b:bd:52:
         9b:b2:42:9f:b0:64:c3:ed:2c:23:dc:5c:9b:07:51:56:5e:30:
         d3:c3:90:cc:c6:ca:47:07:e6:48:d4:71:de:2c:dc:47:d7:3e:
         bd:7f:de:9b:ce:c9:ff:ee:2a:b4:22:af:33:56:c5:ea:f0:e9:
         3f:9a:e2:7f:f9:25:74:d7:f8:7b:c5:45:64:35:84:0e:d3:36:
         0f:c3:a8:99:ac:e9:f3:fc:d9:63:69:4a:d1:80:9a:72:ce:df:
         fe:3b:17:44:66:52:dc:4b:72:7b:ec:e8:8b:13:8c:19:05:ce:
         e7:a9:5f:47:bf:40:a2:71:57:0d:72:6e:ff:05:93:c9:17:c5:
         84:08:4f:30:32:c0:7b:cb:b7:a0:f3:25:d2:ea:f2:4b:1e:89:
         ed:33:58:f7:c5:dd:f0:ac:e4:bd:ad:6c:e8:39:8f:37:0e:42:
         7f:b8:80:0a:15:70:cc:f0:49:17:dd:95:b5:83:bc:97:9a:01:
         61:d7:8e:2f:79:e1:e5:9a:77:a6:3e:ef:a0:5c:60:dd:2f:d9:
         57:c7:d6:b1:77:1f:0f:4c:51:af:cf:c4:4e:73:67:9f:08:62:
         8a:f2:51:0d:b1:07:6b:a3:cb:e0:5e:07:3f:e7:40:4a:2e:32:
         68:e9:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----