Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File:                     XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier:          1HNxooxDqHTy7lgvIrLyqc7dbQ+ep/xLjbcBkgHrJZw=
Subject key identifier:   2D:DB:EC:04:EC:2F:A2:E7:4B:AC:7E:CE:13:4F:81:E0:88:00:4C:1F
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer:       /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial:       01962E98AD4E47F599ECA28A378581DC32C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number:          0AA5
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: XFE7vlLQBmzJZc1l5vHs4bwPMqc.roa (hash: qLSFKwb/lB7qwkyIoSUv9XJpnCetif9CbXA/zmT2Trc=)
                          2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: 2shadF8bmUZ1CDudIvw8sQaQ837zz3uKcqNUpHTSEN4=)
                          3: eg48StlWCUn7X3RwRMM9IyTvRbk.roa (hash: GtElILT2eBg2EORjHkOJ3T4qKsc3NbDsadrpgQ1LlKY=)
                          4: wg5YIR4Y9RixLNkQqF7w7wmBrEw.roa (hash: 1MuzEvANE56SuPGyGU0hUCAeP9aNoicfYJymGmBNFKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:4e:47:f5:99:ec:a2:8a:37:85:81:dc:32:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=2ddbec04ec2fa2e74bac7ece134f81e088004c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:cd:a2:e6:78:ad:9f:61:74:fb:8a:38:49:
                    d3:79:6c:0c:16:b8:20:65:62:b2:82:11:61:6c:84:
                    ab:14:6c:5b:55:73:fe:10:78:eb:6c:a2:42:60:89:
                    5c:a5:c6:48:94:1c:cd:a0:26:c7:a3:3d:07:24:d4:
                    19:2b:01:ef:82:8d:6e:62:6d:41:5e:cb:9b:2a:bd:
                    8f:7d:d2:eb:20:c6:f1:19:47:3a:3a:fa:ca:71:c1:
                    3d:50:1e:8e:7d:04:f8:ac:2f:cc:22:52:a7:fa:06:
                    0b:62:4b:76:d2:ca:08:5b:b4:b0:4d:92:9e:87:09:
                    4e:44:4c:40:ce:75:c9:cc:bf:40:22:c0:5e:15:4c:
                    ed:ff:ac:e7:83:c0:1f:24:8e:f4:c7:c4:a1:76:5f:
                    f2:b6:eb:d4:c4:07:b3:92:f5:e2:64:71:ac:17:4f:
                    7f:bb:4f:66:c3:fb:64:c1:8c:f3:b8:fa:69:6b:11:
                    7a:6d:3c:9a:b1:1f:e2:6f:48:75:b5:9b:ba:1a:78:
                    b9:4a:83:fd:4b:ee:ba:56:00:16:bd:2e:8f:3d:00:
                    4d:f5:53:58:97:fd:70:19:d7:d4:71:9c:5d:f1:b1:
                    47:72:ca:9c:6d:aa:94:e8:e1:f4:90:d6:91:34:fa:
                    6a:f9:9c:20:e3:74:f7:3b:a6:4b:07:7d:df:0e:75:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:EC:04:EC:2F:A2:E7:4B:AC:7E:CE:13:4F:81:E0:88:00:4C:1F
            X509v3 Authority Key Identifier:
                keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:11:1d:b8:a6:c4:71:07:0c:2a:9a:16:10:4d:bf:ce:27:
         b8:ed:e2:87:e0:da:aa:64:72:a5:6e:6b:88:34:66:4a:22:da:
         ec:b8:f8:d3:a2:2d:4d:0e:5b:df:da:d0:42:a1:ca:9d:52:31:
         da:e9:8f:7f:72:6a:59:09:d5:ab:4b:a1:fd:8d:6f:2f:47:fe:
         7c:68:bc:64:62:0c:a2:d0:d5:66:d2:80:26:61:fe:54:58:cb:
         47:8e:59:9f:f6:8b:ec:bb:97:07:9c:ea:2b:38:d3:c6:3b:3e:
         15:ee:3c:3d:fc:ee:ad:0e:60:87:4c:5a:11:6b:ea:f0:e3:78:
         e3:79:0b:01:67:99:fa:a6:bd:36:f7:7d:9f:f1:16:82:57:73:
         b2:50:03:ab:41:2e:07:bb:95:f9:c4:8c:02:47:57:47:65:9f:
         53:2d:31:04:47:59:53:ec:5f:4e:99:3e:d5:ec:59:9a:d9:5e:
         55:40:17:89:79:4a:62:8e:c8:36:e5:ca:a4:47:64:d2:f4:05:
         57:d4:79:76:ec:94:3d:54:e0:5e:2d:a5:5d:4e:d3:a7:79:7b:
         a2:c4:62:59:bb:89:26:03:6a:d4:80:b1:95:c4:72:c0:1c:0e:
         02:f0:8c:6b:39:bf:15:55:d4:13:a1:45:be:29:6c:d4:46:94:
         75:c3:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----