Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File:                     XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier:          U227WmK4k+Ec0Ttwxt9kuIl2ZsY+wbjyEqVpUdfKSOQ=
Subject key identifier:   8D:3B:EF:10:CD:14:BC:55:15:12:4F:24:0C:64:08:EC:BA:09:E6:7C
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer:       /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial:       01962E618506FB7506899C58A65CBCA5D90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: QI8HMnChAHsp9Y7knfOc/Io5bqAv02jVPvKjCNYdy90=)
                          2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:06:fb:75:06:89:9c:58:a6:5c:bc:a5:d9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=8d3bef10cd14bc5515124f240c6408ecba09e67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:81:8d:b4:82:64:d4:9c:aa:c5:e6:f8:87:52:
                    a8:55:7b:10:8c:3f:9d:1b:a2:92:f4:a1:da:22:93:
                    a2:4f:92:06:ae:51:b6:fc:bd:35:50:57:ba:38:8b:
                    67:e4:e6:ba:74:59:54:8a:40:60:de:61:ac:09:dd:
                    82:2d:fa:70:c5:55:42:ab:9f:9f:66:4c:37:c6:ff:
                    35:a4:84:bd:b3:66:7d:81:11:47:d5:9f:7a:e9:6f:
                    79:d5:0b:ce:e7:b1:2c:90:94:34:f4:9d:36:42:7f:
                    7c:38:4b:af:ae:b8:41:6c:ad:83:74:28:2e:f7:0a:
                    31:83:ea:10:f8:4c:f5:a0:89:e2:70:d6:10:fa:b5:
                    5f:e3:31:05:22:a1:06:c8:5a:a4:d1:51:38:23:2f:
                    09:53:d9:74:a8:a9:92:df:31:4f:39:1a:4f:de:97:
                    ed:d7:a7:ef:bd:d3:ab:d2:e3:0f:5a:3c:dd:6e:4e:
                    ea:8d:82:57:5e:7d:fb:cb:ff:49:ca:08:49:cc:21:
                    67:96:2a:78:3b:44:74:a9:da:33:6c:86:34:2c:3c:
                    be:65:d7:72:8b:ad:3e:57:39:d4:bd:fd:58:77:d6:
                    84:06:49:11:3c:48:48:dc:04:8a:13:66:db:d0:b7:
                    99:7f:31:fb:53:8c:7d:17:dd:2b:43:0e:66:ab:ec:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3B:EF:10:CD:14:BC:55:15:12:4F:24:0C:64:08:EC:BA:09:E6:7C
            X509v3 Authority Key Identifier:
                keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:03:10:79:f4:04:4e:0a:62:66:71:0f:e1:00:69:49:6d:
         49:2d:46:98:9c:d7:1e:6b:7f:18:a3:2b:97:52:d6:95:6a:5d:
         bb:3c:d1:41:91:dc:27:da:00:65:8d:9c:72:c5:93:68:37:ee:
         0c:f5:5d:b1:9a:5b:74:d9:8e:8e:92:d7:db:a7:1b:0f:63:d6:
         eb:fc:50:2b:a6:a1:9b:20:bc:d2:cc:40:c2:5e:1b:90:b2:2f:
         57:b3:2a:42:ec:2c:cd:6c:90:93:6d:ea:73:fa:53:9e:6f:3e:
         a8:17:63:c3:a8:0c:7c:4c:20:03:98:5b:07:82:f5:93:58:e7:
         d7:a9:52:19:fa:12:8d:86:ad:b6:7c:e0:cd:38:c7:67:57:35:
         10:27:ba:5f:f7:55:35:1f:55:09:fb:19:b8:49:7e:b7:e8:68:
         07:c3:0c:a2:45:da:21:bd:cc:02:0c:33:cd:50:b2:e3:5e:16:
         79:33:89:15:ce:2b:03:40:9d:51:2d:b4:20:e7:c4:60:96:de:
         a1:fe:1a:dd:e4:5b:27:21:5a:56:6b:18:8d:0c:75:c1:c4:30:
         f8:34:41:cb:62:1d:7d:52:bc:8e:b6:00:b8:c0:51:d8:c0:dd:
         34:b1:0a:18:67:4b:72:57:30:75:ac:9b:d6:00:93:20:db:41:
         e6:dc:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----