Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File:                     XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier:          QGYinl8DD4ZhsdCcC3LRtEyg4xbawW2C1VRG4fKePEo=
Subject key identifier:   44:46:98:28:7C:53:0C:94:2E:40:BE:CC:01:DB:ED:E7:AF:8A:C3:04
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer:       /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial:       01962F06D0D9B2B008E68FEB09FE9B384656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: daNTwOMSJ5nr/vcXSNJ/XOpTjn9mzoSxQXOXeDnw1p0=)
                          2: srWs4lSgEcXww8bmZ8Qduqdxgdw.roa (hash: Fa3vdYsDt8LbAe4PXMPi2JDBOubqWHhdVQas9y66mmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d0:d9:b2:b0:08:e6:8f:eb:09:fe:9b:38:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=444698287c530c942e40becc01dbede7af8ac304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:6e:40:9d:85:62:b4:f1:a4:7e:f1:4f:43:
                    a5:b0:4c:4b:70:6d:5b:06:01:80:18:4e:e0:50:70:
                    53:f9:b2:cb:74:4e:1e:fa:10:f5:ac:3e:f5:11:79:
                    6d:31:7d:9a:7c:9c:e6:d3:10:3b:26:78:cb:aa:0a:
                    fd:b5:3a:3e:b8:54:b1:b2:94:af:2c:1a:f7:6b:e6:
                    95:5f:8a:ba:23:1a:f6:ad:9e:ec:69:83:eb:a2:4e:
                    e1:d1:22:d0:e6:48:1f:c9:f5:12:8a:f5:c1:c9:8e:
                    56:c3:f4:32:60:50:bf:a1:a6:78:a4:80:51:ba:6b:
                    74:30:a3:41:89:d8:5b:1b:ce:cd:47:bc:17:dc:25:
                    ee:0a:da:8c:6e:37:08:08:58:cc:c4:68:21:f5:6a:
                    c9:3e:0f:af:36:ee:b4:37:6b:8f:a8:85:4a:20:fb:
                    63:d3:93:b2:14:45:17:51:b1:3e:08:8f:a9:05:ba:
                    57:93:98:7c:32:1d:79:06:ba:98:78:92:81:0e:38:
                    be:f4:5b:f5:0a:02:be:86:49:7f:1f:c9:b2:8b:14:
                    b0:4d:fa:fb:87:9b:8c:24:a1:16:01:06:cd:a2:2d:
                    d2:c4:5e:85:93:66:5c:80:92:98:d5:8d:ff:22:1c:
                    ea:30:e5:8a:ab:6d:db:c9:08:f7:67:1d:c5:0d:8c:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:46:98:28:7C:53:0C:94:2E:40:BE:CC:01:DB:ED:E7:AF:8A:C3:04
            X509v3 Authority Key Identifier:
                keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:84:4e:22:f8:6d:5a:89:11:85:9b:f4:de:5f:bd:14:1a:ba:
         d5:d8:b0:b8:e4:41:66:4e:76:d3:47:0f:fe:86:61:6c:b9:6f:
         da:5c:0e:17:5a:7f:5a:0e:7f:e6:65:d0:93:36:e7:2c:ea:f9:
         68:1b:77:c9:c5:d8:be:93:fd:27:ec:50:cf:1e:9a:dc:bc:cb:
         ed:6a:14:25:2b:e7:91:94:5f:a8:75:fa:a5:ef:bc:51:a0:ed:
         a7:51:1b:5e:f7:d6:03:f3:66:26:a1:ac:4e:fe:45:a5:58:9e:
         97:f7:5b:73:47:ee:59:39:1f:33:58:8b:6e:e4:43:f2:c5:25:
         45:a2:e1:a9:bd:b7:33:83:f9:95:05:cb:b7:09:fd:7a:3f:5c:
         e7:16:a0:95:e8:4a:e7:58:1f:5e:b6:38:8c:2e:fa:86:39:e5:
         ba:33:2e:12:fe:ec:a8:c4:a4:f7:63:b0:77:02:3f:f4:c7:b8:
         5a:ad:2a:a5:c9:b6:f6:bc:c7:60:5f:87:1d:a7:5f:4e:de:39:
         a0:3e:76:8c:88:2b:c4:a7:26:eb:dc:eb:fc:39:b5:0a:46:9e:
         c6:f4:ba:5b:b4:63:7b:66:a0:68:11:22:af:44:a9:8d:b5:a4:
         3a:ae:ba:bc:1a:67:c8:97:9a:c7:27:46:a4:b6:50:8b:56:9e:
         98:78:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----