Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File:                     xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier:          R55f0P3azQWdLJMFaj9XHI/qkTaxTDHNoAYl5Pi01hk=
Subject key identifier:   62:09:58:5D:F7:70:7B:9D:64:A1:90:AB:9B:F6:A2:99:D9:91:C2:C5
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer:       /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial:       01962E2AE5866121DEF428B90A8F257EB9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number:          0204
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
                          2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: NJJZIpQPU6rnF6I8aLRD7BWuyg2WjdpwofbC1f6r0xM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e5:86:61:21:de:f4:28:b9:0a:8f:25:7e:b9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=6209585df7707b9d64a190ab9bf6a299d991c2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:3f:d4:f9:0a:69:2d:fb:9e:fe:5d:65:0a:
                    42:8d:66:02:3b:23:d9:53:f6:90:02:af:ec:a0:c9:
                    d7:a5:ce:81:12:95:ab:7b:f9:cf:27:fe:4f:56:a9:
                    58:28:93:76:50:b8:ee:c3:d5:b3:95:e8:cc:6f:1e:
                    63:b8:c9:7e:b0:f6:92:5f:9e:ba:85:b5:57:c7:ca:
                    e1:e6:76:a5:73:1c:9e:97:22:fe:0c:ed:93:d6:46:
                    2b:40:58:e3:03:a5:71:4d:e3:4b:22:ef:97:3d:e0:
                    4f:a6:cb:ba:28:c7:b1:97:04:ee:46:77:7a:b6:47:
                    94:3e:c8:7a:27:c9:c6:1c:50:40:91:97:05:b4:9b:
                    e7:57:71:94:a5:cd:fc:14:7a:72:cd:0e:22:80:04:
                    dc:e0:66:cb:86:c2:f4:e5:51:8b:84:f1:a1:61:d4:
                    1a:de:e2:d3:02:16:e9:e5:01:97:f0:94:2e:4e:d4:
                    4a:97:8d:9b:55:72:2d:6b:43:43:d3:0d:4d:36:4b:
                    94:f2:49:69:7e:3e:40:c9:8a:64:73:3b:08:a0:b9:
                    1a:f3:71:e0:d8:ca:49:78:58:47:97:ca:c1:63:83:
                    97:12:5f:dc:5c:0e:04:39:c6:b1:d6:4c:6a:dd:9a:
                    b1:2b:e9:b2:8c:a8:83:a8:d5:be:4f:ad:c0:31:8c:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:58:5D:F7:70:7B:9D:64:A1:90:AB:9B:F6:A2:99:D9:91:C2:C5
            X509v3 Authority Key Identifier:
                keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:64:51:87:14:be:1e:77:fb:ee:4a:33:dd:c4:c7:09:ad:82:
         3c:95:5a:b4:96:bb:86:90:da:30:20:b0:d7:c7:dd:83:89:cb:
         c7:c3:1e:53:53:34:4d:2a:eb:18:42:c5:01:0d:b9:94:f5:dc:
         97:1f:27:a9:38:2e:f1:9c:3f:e5:6a:48:b2:ea:66:9c:4e:72:
         c9:4b:59:59:f4:8a:60:4a:df:43:04:4f:dc:3a:39:fe:8b:a2:
         08:f4:ef:6b:ce:87:bd:42:2e:4e:47:5d:53:24:44:af:d4:1f:
         f0:46:f5:ab:6c:b6:7f:72:36:13:f0:38:f7:d5:0c:28:70:f1:
         3b:a6:f1:0c:28:9e:9a:c6:bd:0b:29:90:fb:3e:1c:84:3f:31:
         ba:4c:e8:ca:ba:94:67:97:67:8b:03:e5:70:b3:2a:ab:f7:3e:
         dc:85:61:cc:54:e7:1d:c3:c1:fc:b1:a3:4a:4e:48:54:f6:29:
         d4:6a:40:5d:9f:b6:7f:16:e0:ee:49:41:c7:91:fa:59:71:c0:
         bc:0b:2f:64:42:7e:76:c7:d2:6d:27:c0:11:23:07:e1:68:1f:
         c0:65:01:9b:5c:dc:ec:88:3b:8e:e6:58:d6:ac:0f:43:5f:f1:
         1f:f7:7e:7b:e1:5b:37:17:71:e5:b7:af:00:f7:51:9b:b9:9c:
         38:21:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----