Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File:                     XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier:          0FX1eN6rcFFafhxGnhaP8ZiJxyMqjG06wQYtvSMazSc=
Subject key identifier:   7C:A3:0E:CE:2E:C6:3A:C2:68:27:29:E0:8B:DA:4E:EB:CC:AA:1D:37
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer:       /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial:       01962E98C22877EBC70AD59E9831DF807516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
                          2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
                          3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: IXZ+u6VwtItBwPHTu5L2mjC2avEHXeg5IaVb2KMnSe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:28:77:eb:c7:0a:d5:9e:98:31:df:80:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=7ca30ece2ec63ac2682729e08bda4eebccaa1d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a2:fb:ce:72:e1:2a:62:3a:54:42:20:de:00:
                    ca:5a:39:ba:6e:79:e6:d5:a3:6f:c8:da:3d:2a:eb:
                    3f:92:8c:4c:a0:e3:97:ff:9d:71:cf:1e:53:8b:1f:
                    57:6e:e8:28:a5:35:0e:a0:ec:80:0e:8b:86:34:7b:
                    a8:dc:c2:08:77:7a:b9:69:f1:f5:18:5a:5f:0d:a5:
                    d1:9c:f6:42:a2:14:08:b3:ad:b8:66:94:db:fa:09:
                    14:40:ff:33:3b:f6:55:2f:f7:06:8d:c8:3b:c6:7b:
                    a4:17:a4:63:3d:00:96:28:ec:fe:97:dc:e0:a4:aa:
                    90:b3:87:67:e7:47:31:14:67:78:60:9b:5e:68:c2:
                    10:cb:b5:9d:62:8b:c3:f6:2b:1a:3b:9e:ce:ac:8d:
                    b4:85:f7:59:ea:69:9d:57:e1:57:e5:ff:68:e7:07:
                    99:9d:4d:5b:6c:60:2e:28:19:8d:0f:c1:d8:87:0e:
                    ad:d6:c4:ee:d0:df:f8:ff:b8:1b:08:e0:5d:f5:ea:
                    30:b4:90:ed:18:59:52:66:bb:90:a4:9d:23:af:53:
                    ef:2d:94:b6:f8:35:9d:70:62:03:35:7b:56:77:59:
                    ac:ac:c0:9a:15:f6:6f:5a:42:55:ad:02:43:2e:7d:
                    28:a7:8c:b2:1e:bf:94:6f:6f:4e:29:9a:c3:19:0b:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:0E:CE:2E:C6:3A:C2:68:27:29:E0:8B:DA:4E:EB:CC:AA:1D:37
            X509v3 Authority Key Identifier:
                keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:3a:be:c0:f7:28:1f:f6:54:51:24:42:d2:70:30:ea:5a:
         35:49:fe:be:7f:7c:dc:11:28:76:1d:00:a4:83:d2:03:64:b7:
         df:a6:ec:49:75:73:31:65:b5:c9:7f:a6:f7:b6:75:fc:61:5e:
         ed:90:9f:64:08:ba:e7:9b:f2:a5:e8:0a:2c:88:da:21:bd:98:
         3f:99:04:0d:8b:61:71:d2:a5:18:a2:c2:da:61:38:9c:70:91:
         e4:8f:c9:af:2a:6f:a4:3c:59:ef:54:7d:f0:42:13:87:fd:83:
         fd:97:eb:60:d7:ef:c4:36:23:c3:23:d5:57:e6:e3:6c:68:db:
         88:d1:da:4d:7e:61:f9:7d:cd:35:23:c3:e7:9e:f4:44:82:ed:
         b0:9e:35:ae:50:50:f2:bc:2f:07:6a:53:5d:29:11:b3:1a:6b:
         23:4b:79:be:4c:ca:a5:bd:91:99:0c:b2:13:c0:44:b5:c1:e1:
         a8:74:bf:70:ab:63:88:fa:10:b1:02:e7:05:dc:17:75:96:53:
         6f:06:a2:d4:5d:a2:33:03:77:fe:c8:dc:b6:dc:99:be:ce:92:
         33:9f:b1:41:4b:78:78:dd:f6:78:72:b0:ab:62:87:44:37:03:
         95:10:64:1b:23:50:c8:5e:b9:f8:7d:b0:8e:bf:75:f9:ae:9d:
         fa:1c:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----