Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
File:                     xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft (raw, json)
Hash identifier:          JzWexNSiR9BVzzuRJIP6IJyH7PV4ruMFnEYEECkrZfw=
Subject key identifier:   87:6B:80:F4:BC:C8:F7:BB:CD:A3:E2:CB:D4:E3:18:43:4A:D6:E6:12
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Certificate issuer:       /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial:       01962FAB4809B36CCDC9CF2EEBD97AF32907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft
Manifest number:          05BF
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (hash: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=)
                          2: xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl (hash: bXEa4JQkukZnYSMJd8+vHNHpP3F/lbGeSUxOXzDF7uE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:48:09:b3:6c:cd:c9:cf:2e:eb:d9:7a:f3:29:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=876b80f4bcc8f7bbcda3e2cbd4e318434ad6e612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:dc:ef:a1:67:a7:02:cc:3d:e1:51:95:57:
                    8c:c4:ed:27:21:98:fc:56:bf:c0:76:b7:83:be:cf:
                    4a:66:2c:c3:8b:07:5f:6f:77:fe:59:c4:0e:58:48:
                    8f:e6:34:8b:aa:ce:44:9a:7b:8f:b4:e6:0b:76:7e:
                    8c:22:be:47:1f:f2:01:6e:bf:7d:67:64:78:d4:b5:
                    8e:03:eb:34:c5:0f:d3:51:f5:59:4e:ec:fd:ab:d0:
                    66:18:5a:7a:1a:e1:d6:af:4c:13:a9:d8:a2:3c:a7:
                    6d:98:df:90:d6:f0:dc:ab:36:6c:3c:b0:29:ce:ae:
                    78:28:03:c4:db:d3:7b:2e:54:40:4f:e0:b1:ef:73:
                    bf:a7:45:17:05:7b:31:87:2a:e2:64:2d:b5:37:c1:
                    3a:e8:cf:7a:e2:fb:a5:21:fc:13:21:fe:79:5d:d9:
                    c6:17:a9:ad:67:81:8b:93:bb:f4:43:43:e2:74:06:
                    62:13:3e:e0:5a:50:7b:fb:0f:bc:42:d0:19:c6:da:
                    18:49:52:37:a1:97:08:f0:6e:c3:8e:e3:b0:0e:ba:
                    de:fe:75:3d:10:47:e7:f1:b3:a1:e7:22:8c:f1:a3:
                    c0:fd:5f:5e:28:3f:0c:f5:95:83:65:50:c3:46:75:
                    97:b1:10:16:d7:53:aa:c1:e9:90:6a:16:91:1a:6f:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:80:F4:BC:C8:F7:BB:CD:A3:E2:CB:D4:E3:18:43:4A:D6:E6:12
            X509v3 Authority Key Identifier:
                keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:39:64:5e:29:3d:86:e7:2f:93:26:5a:5b:26:20:b7:5d:
         05:f4:da:37:51:3b:a7:49:cd:63:fe:b1:32:42:8a:55:4e:88:
         66:19:df:b1:0a:7d:33:5c:20:62:26:b0:92:53:98:7a:31:26:
         95:40:b9:34:c6:fd:ec:f5:93:2f:c9:d5:72:e4:cd:6c:c1:8d:
         01:6b:65:2f:b7:b9:59:d9:9e:c7:d1:fe:54:13:00:f9:4b:0c:
         ec:c1:37:d1:b9:c4:55:29:0a:b0:2d:23:2c:fb:8e:d2:be:3d:
         3f:83:81:d0:07:fe:4e:d3:32:bd:64:4c:30:f8:3c:89:ec:dc:
         43:5a:39:d0:c1:a0:48:f5:12:b5:ed:84:5e:57:72:e6:9b:f2:
         c2:19:00:68:a0:aa:ac:c0:74:43:47:04:e4:d6:e5:16:ef:67:
         bd:f2:4d:73:e2:eb:e7:6f:68:78:15:0e:ca:f3:21:c3:95:ab:
         c2:cf:37:bf:e8:ed:3e:7b:a2:60:0d:89:88:24:e4:57:55:6f:
         5d:ed:67:8e:c8:88:df:34:04:c0:a7:17:e6:23:5d:f7:1f:a4:
         01:bc:e7:e6:63:42:e9:ad:ef:76:af:ed:91:0c:f4:56:0d:37:
         e5:0a:78:24:91:c6:af:13:b3:49:50:8a:62:31:ec:b8:fa:61:
         4c:09:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----