Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File:                     XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier:          tJb9OOKtAVBqmqDOTIOSgorNYXEa4fItMxqOHjMTwyI=
Subject key identifier:   72:E4:9B:D3:C5:5F:45:02:1D:8A:C4:AE:B0:45:5E:99:24:B6:A8:FA
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer:       /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial:       01962F06AF832FB8BBAB802A80BDC332083B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
                          2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: nB0d+rSSENCByRwSbR6ZILquLwJDNM4pJUYGUuxB/7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:af:83:2f:b8:bb:ab:80:2a:80:bd:c3:32:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=72e49bd3c55f45021d8ac4aeb0455e9924b6a8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:87:a9:c0:44:d4:03:32:e9:5a:b4:44:c5:
                    c2:5f:b2:b6:ac:6c:aa:01:b5:21:20:8c:06:d9:21:
                    a3:2a:31:2b:1e:ad:63:9d:a4:de:a5:c6:d1:06:9e:
                    2e:3b:73:f8:07:c4:d6:fa:b3:74:9a:9d:f5:b2:89:
                    b5:e2:b7:dc:3e:17:5d:e4:7f:11:b2:0b:93:28:a2:
                    f9:12:72:b3:a6:ae:1b:51:06:cc:f2:56:e8:b8:b2:
                    99:bd:e6:79:0d:5c:49:6e:9c:ae:63:0b:0a:22:f9:
                    00:a2:15:32:8c:44:d3:5e:a9:90:82:c9:81:8a:98:
                    6f:ac:2c:36:81:45:dd:52:a2:03:40:fb:ef:32:8c:
                    35:1b:67:45:af:0c:53:1a:08:da:48:da:7f:97:93:
                    90:a5:e1:c1:b1:89:39:a1:d5:b5:c9:a8:a9:91:99:
                    71:54:c4:17:70:7b:d9:57:bc:05:63:8b:9a:d2:d7:
                    dd:c8:ba:c9:91:9e:54:fb:89:8d:57:d5:30:84:10:
                    4b:b6:a5:c3:64:d5:ec:0c:05:63:3e:ff:5a:04:ab:
                    c5:e1:7c:25:85:38:cd:bb:f5:b9:74:e1:57:5b:fb:
                    8a:c1:f4:70:30:0f:1b:f2:14:96:c3:9f:e9:37:4c:
                    41:12:4d:46:3e:87:b5:1f:cd:96:af:40:16:06:5b:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E4:9B:D3:C5:5F:45:02:1D:8A:C4:AE:B0:45:5E:99:24:B6:A8:FA
            X509v3 Authority Key Identifier:
                keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:da:e9:b4:9f:1c:01:c4:56:d1:5c:78:93:95:7d:9b:75:
         86:1d:24:90:81:a5:ae:69:57:7c:5b:f6:8f:1e:25:32:99:e2:
         42:05:38:8e:6e:3e:c3:0e:a9:a3:4d:94:66:ab:ed:21:74:3f:
         e1:b9:97:c4:5a:6c:fb:b4:af:81:60:35:ff:c4:33:c8:8c:21:
         4d:ad:3a:ca:a9:4b:6a:83:e3:8b:c6:72:cf:94:22:2d:bb:84:
         c5:f8:c0:fa:81:ff:c5:31:e6:48:64:7f:c3:3f:52:ba:fb:aa:
         20:bb:07:2a:45:d9:2a:c9:72:0c:18:14:7e:3b:21:cb:2a:9c:
         89:7f:37:05:0c:5f:e1:69:a2:a5:5f:ac:e4:f9:e9:e1:ba:5f:
         cc:38:98:92:e3:65:c8:ef:f6:40:28:64:8f:78:33:69:73:ef:
         01:d3:47:20:2e:5d:ef:3c:80:be:f4:5a:d2:78:92:a7:d7:da:
         57:2b:cc:93:18:b5:9e:cd:ae:b1:42:d4:86:64:7a:34:5b:01:
         07:7c:b8:22:37:6f:2a:d6:f5:9a:ad:26:d3:ae:72:7e:90:a3:
         b3:f6:e3:b3:52:2b:4f:8c:0a:9f:06:8d:d6:26:85:06:04:76:
         c4:bc:43:26:51:d5:f0:d5:2a:aa:c8:3b:d6:03:cf:2d:c4:9e:
         97:38:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----