Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File:                     XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier:          6YxbsfekrxW+0aYp86mo+eHODHZenSWU9x3ji+crGV8=
Subject key identifier:   0E:8E:A2:31:E1:A6:1D:03:A1:5C:7C:93:0F:8D:26:C0:4B:FF:16:BB
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer:       /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial:       01962E6182BC033AD1B478C72713BA6934E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: 8bAJRUPQ7g3BL/6anKEYsgr22IPIh9GoIIDqguo+qks=)
                          2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
                          3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:82:bc:03:3a:d1:b4:78:c7:27:13:ba:69:34:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=0e8ea231e1a61d03a15c7c930f8d26c04bff16bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:6d:c6:68:e2:dc:7a:5f:f1:60:60:49:65:
                    cc:98:42:db:b7:cd:61:6e:20:c7:b0:d3:83:5e:c4:
                    f4:b1:d0:1b:50:6e:b3:3e:60:b9:09:7a:3e:53:65:
                    b7:6d:4d:4b:ad:90:69:6e:41:37:bd:32:a8:f5:46:
                    3b:9e:13:4e:b2:2d:e6:6b:0e:95:04:1a:4e:c4:9b:
                    b5:5b:3c:5e:6b:b3:56:81:6d:8c:47:b2:83:d1:2a:
                    bd:3a:90:76:1d:c5:d4:d8:48:20:2b:69:d1:33:94:
                    41:fa:d1:f8:16:fe:e7:ed:35:84:c4:96:68:8d:fd:
                    38:5c:d9:cc:64:39:c9:81:40:9d:1b:92:aa:34:cb:
                    e7:78:50:c6:37:79:9a:a6:94:14:34:ec:bd:31:9d:
                    d2:3f:bb:0e:3f:0f:78:0b:d5:24:46:e8:3a:9c:be:
                    2e:a5:73:db:df:b7:6b:fd:ba:30:7e:c6:f0:7d:f4:
                    c9:8f:0f:4d:ce:c8:84:ec:7a:67:6a:8e:4d:b0:ea:
                    00:ca:75:d9:fa:4f:2f:25:aa:29:81:f5:cf:3c:30:
                    d9:38:20:75:58:7b:c9:33:43:e2:4e:9f:f8:27:a6:
                    b1:fb:d8:4c:e9:e8:cb:f9:19:4a:48:c5:af:fd:85:
                    4e:7e:99:77:ad:64:ed:35:3b:ad:5a:d0:1d:7e:05:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8E:A2:31:E1:A6:1D:03:A1:5C:7C:93:0F:8D:26:C0:4B:FF:16:BB
            X509v3 Authority Key Identifier:
                keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:2f:b2:09:ee:ae:7d:97:e6:38:93:f1:ed:93:77:cc:3b:
         fb:5c:b7:95:6c:f1:a9:0b:8e:ad:9b:18:f7:39:de:23:f0:20:
         dd:04:c7:7b:45:65:03:ee:4b:cf:09:ae:85:a9:ff:de:3b:93:
         a4:af:a9:05:c7:7a:17:5d:27:f3:1a:2a:32:c0:84:53:51:23:
         76:2e:5a:c5:22:66:50:00:1c:30:0d:fc:2b:66:9e:51:74:2f:
         70:9c:7b:38:1f:11:dd:c6:06:31:69:89:f8:9b:50:e1:44:b1:
         a9:cb:95:e6:44:3d:96:94:46:0b:1c:6d:cb:35:41:6b:bc:c9:
         69:40:d5:6c:ac:cd:a5:64:43:7e:90:27:17:96:fc:8e:0e:39:
         83:a0:5a:87:7f:0f:8d:ef:1d:32:fc:49:e5:41:c2:e5:f6:99:
         30:31:59:b5:42:1c:6f:bf:67:8f:03:b4:fd:97:9f:dc:0e:5e:
         33:d3:5b:3b:32:ec:25:67:24:e4:2b:44:ce:32:f8:43:ed:88:
         32:f9:ce:1d:c7:64:cf:84:c9:4c:4c:6a:c4:8c:c1:1d:b9:a1:
         b6:f2:1a:70:de:b8:db:bf:de:41:1c:21:0c:73:fe:08:79:ed:
         35:72:a0:70:f1:60:83:ff:ac:06:e8:82:f4:55:a5:2e:4d:a0:
         f6:1e:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----