Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File:                     XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier:          HqjyYNhssg8975+ajYvptUcuIW4Lcj5bnN4pV198G3U=
Subject key identifier:   92:F8:42:C7:07:FF:9A:67:93:CD:5C:B1:8F:07:86:9E:ED:9D:E5:EE
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       01962DF3A4566971DD47F86A1AF02DBF67E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
                          2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: T+USLyvYuBNcIlzs0koXeqC863kybHDQHpKA1pn477M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a4:56:69:71:dd:47:f8:6a:1a:f0:2d:bf:67:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=92f842c707ff9a6793cd5cb18f07869eed9de5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:47:eb:0a:0d:5c:a6:af:46:56:97:2c:f0:
                    af:0d:5b:1c:93:b6:01:f9:7f:03:1e:c9:5b:b7:43:
                    c2:bc:3d:13:c9:f9:58:d0:c1:b0:6a:84:90:3a:7c:
                    01:cd:5d:7e:92:e7:76:f0:36:93:af:6a:f2:2f:ed:
                    e8:03:4e:55:15:54:b0:2a:fd:64:64:54:a6:8b:05:
                    a4:1a:11:c0:26:b0:a5:53:9e:63:a8:f3:bb:68:52:
                    97:28:de:81:7f:69:2a:25:66:c8:1a:28:ac:ab:60:
                    59:12:47:28:71:53:c1:e5:e0:9b:ab:41:3a:14:e9:
                    0b:5c:e2:0f:a8:99:33:23:83:0e:8f:59:39:c3:c9:
                    1c:6d:ca:85:87:c5:cc:db:c5:cf:23:ca:52:29:d6:
                    2f:16:5f:fb:2c:b8:c2:2d:1d:6c:6b:c3:6f:93:50:
                    07:64:2a:03:49:6c:ef:30:0d:01:76:cf:ad:32:73:
                    ad:2b:54:6f:32:49:7c:c7:0c:d6:d7:fc:57:c3:c0:
                    dd:cf:f8:46:59:ab:35:93:d2:44:8a:8a:2d:52:ff:
                    bd:03:81:ff:bb:dc:66:c7:e7:d2:30:fd:79:2f:4a:
                    a0:0b:6a:dd:8f:6b:6a:9c:cc:57:14:a1:ab:c0:c6:
                    89:95:be:bb:6f:1e:6f:7c:32:9c:09:c8:95:61:4a:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:42:C7:07:FF:9A:67:93:CD:5C:B1:8F:07:86:9E:ED:9D:E5:EE
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:27:6f:80:1d:2c:1c:0a:40:e6:b2:aa:14:fe:0e:8d:13:aa:
         34:4a:8d:4d:cc:5d:0f:a7:a0:92:04:e2:5a:bd:ab:7c:6d:24:
         02:18:a5:c4:f0:9f:5b:6d:13:a2:65:45:c0:95:93:d7:5b:af:
         60:48:96:58:ad:06:c8:73:2a:fb:fe:e6:d7:f3:7d:d0:62:a7:
         39:35:73:c8:f3:ec:0c:4c:fa:16:65:f5:36:6b:e8:b9:3a:aa:
         fb:1a:e4:76:c9:96:1f:16:e8:7e:97:9f:7f:c1:af:c9:c1:31:
         20:d4:d1:af:8b:ad:95:89:05:e9:99:a6:dd:d4:60:7d:09:01:
         3b:2f:fe:64:4e:53:7d:a3:bf:a9:71:02:69:63:4b:bf:2e:db:
         23:cf:94:3d:a3:c8:ea:9a:73:0e:db:87:f8:f0:b8:e7:0c:37:
         68:8f:fd:f2:10:61:99:b9:a4:71:66:16:b6:6a:c2:a8:a3:bd:
         1f:df:f0:24:4f:1c:cd:a6:6c:f7:00:6e:10:c3:60:33:c4:c3:
         5b:2e:1a:02:e1:12:20:bf:97:f7:ec:0f:7e:8e:07:3f:64:10:
         7a:e7:1c:e5:b5:bc:a9:37:6b:d4:f0:4e:33:f3:4d:c2:77:08:
         fe:e4:d1:47:9b:16:b1:16:ac:4a:8c:c3:c1:9c:58:e1:95:d2:
         48:71:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----