Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
File:                     XasLCOUfgYIkYp-zohHYPVvjVEA.mft (raw, json)
Hash identifier:          4bj2yb8GL1Fc2XSnrF1cZZGd7bCpvjGKCtJ+xJWInYM=
Subject key identifier:   58:39:F3:B3:DA:A1:D2:F3:80:54:18:9D:09:29:BE:4C:F9:0F:E4:54
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Certificate issuer:       /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial:       01962E2B3F3E1A901FA49D4C606B3FFDF401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
Manifest number:          12F7
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: J3IfRy5hJG3sO5FFR3klCa0Rmag.roa (hash: y8cOLwfC28T1Q/CwomIs12ZpdB8agP1zP7ErrJL2HLM=)
                          2: XasLCOUfgYIkYp-zohHYPVvjVEA.crl (hash: 0Z+vd7I9XQtqK82KUnzQSmFhV3AkbyQGm68MPcqwyFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3f:3e:1a:90:1f:a4:9d:4c:60:6b:3f:fd:f4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=5839f3b3daa1d2f38054189d0929be4cf90fe454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:0b:e3:35:6f:82:37:66:ce:8e:21:a0:72:
                    a7:72:0b:1d:4e:0b:1e:2b:fd:42:e2:16:f8:e7:22:
                    62:cc:4a:8c:73:af:0a:26:3b:aa:a7:16:88:5c:fc:
                    e3:d3:d3:57:22:e1:5e:bd:1b:62:fb:e1:3c:2c:a2:
                    91:37:f7:e0:71:06:0d:c0:df:32:00:bc:30:da:e0:
                    fa:18:dc:8e:b6:6b:5d:e8:65:f6:b9:55:ac:8b:07:
                    f6:4d:8b:1f:29:24:f2:19:32:e5:6b:44:d5:8d:2e:
                    b5:95:eb:73:eb:ce:a7:58:6d:f3:bc:0d:b8:0f:39:
                    7e:22:ef:ad:66:7e:7d:54:65:79:99:da:f9:5c:10:
                    da:97:ea:85:e0:41:f2:9a:27:a6:f8:6e:61:93:3a:
                    e4:5b:b9:89:05:da:ab:ef:a7:2f:7c:c9:38:05:fb:
                    47:4e:bd:44:41:a5:29:b2:80:a0:3a:57:f6:d7:06:
                    63:8d:b7:49:3c:83:86:58:5e:bc:ee:96:3c:08:10:
                    0a:3c:1d:73:61:de:db:bb:ac:e9:87:ce:6c:a4:ef:
                    e5:bc:07:4b:bf:36:7d:8d:0f:78:b2:27:5f:8d:4c:
                    ba:8e:e8:54:d8:ab:68:67:6d:a1:66:e7:65:9c:15:
                    b2:0e:40:99:e3:17:57:a4:cf:4a:5f:4f:0f:d9:66:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:39:F3:B3:DA:A1:D2:F3:80:54:18:9D:09:29:BE:4C:F9:0F:E4:54
            X509v3 Authority Key Identifier:
                keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:2b:30:82:6f:4e:43:b9:ae:81:6f:02:62:9d:99:37:43:
         9d:2d:36:dc:5c:e7:8c:36:bd:0e:58:0c:86:be:0e:4b:4b:f1:
         97:b2:51:65:84:34:62:6d:86:38:4b:8b:ab:6a:d4:32:61:8a:
         f5:70:ff:87:97:03:25:9e:4b:4a:fe:a9:be:e9:9f:77:46:4f:
         7d:7e:27:dd:df:82:79:13:6c:fc:11:cc:b5:de:51:bd:6b:79:
         a7:e6:04:26:f0:99:2f:97:d1:75:75:03:e6:db:16:f1:21:73:
         4f:d6:e6:19:a0:5d:09:f7:38:75:a3:34:ad:c0:4b:07:c2:ed:
         ef:66:25:18:19:a9:7d:63:14:04:e9:1e:f7:a0:21:05:f7:a2:
         56:86:dc:9b:52:51:a0:47:81:7f:9f:68:e8:68:66:f8:2e:13:
         0d:e1:98:9c:7c:82:21:cc:ba:af:49:8c:00:a4:96:77:ad:af:
         29:54:bc:75:c7:1b:51:92:cf:2a:69:c1:05:76:77:fb:90:82:
         4b:0a:52:ef:96:67:d1:ec:84:13:39:cc:25:38:79:f5:35:b4:
         ae:91:60:f8:e2:cf:9b:d4:53:87:e3:c6:06:3d:ac:c0:49:c5:
         55:83:23:41:e2:d9:23:3d:67:61:16:9f:f7:c0:17:85:de:3b:
         07:77:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----