Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File:                     xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier:          e/tziCGZDiDKO327X6WEI0HD4CqY1I8emC+gjbpples=
Subject key identifier:   D8:A4:BD:94:9D:B5:FF:4B:9E:92:A2:8E:18:15:E1:22:7C:C3:A3:CF
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       01962F3D698196CC36D0FF99341E2CD9C5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number:          06B7
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
                          2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: BZ2TogDmDKgv955WzsW0JyCjPs9CNOtIvl01/oC1qZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:69:81:96:cc:36:d0:ff:99:34:1e:2c:d9:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=d8a4bd949db5ff4b9e92a28e1815e1227cc3a3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:09:97:03:d6:16:75:89:e9:1b:42:65:20:70:
                    1a:2e:6b:35:cd:02:48:d3:ab:20:ab:a1:1f:8f:7b:
                    bd:dc:5a:05:c1:5e:26:ba:21:61:e3:84:71:50:40:
                    57:b4:33:01:f5:79:3e:57:57:9d:66:1a:3f:37:38:
                    d1:76:43:f8:a9:c3:b8:fb:bd:70:97:88:20:01:8e:
                    41:c6:eb:ad:d1:f1:84:ad:d0:e8:d4:53:7b:07:44:
                    be:86:48:87:8e:c5:e8:20:32:39:2c:39:30:61:6b:
                    71:e0:df:91:7a:2c:32:a8:4b:5a:2e:86:e9:3a:c5:
                    70:ac:d4:68:b2:46:c5:e5:e7:ff:48:b9:57:a8:47:
                    6c:c4:38:a0:1b:a1:8d:b9:78:4b:f9:92:7a:9d:d8:
                    f0:ed:71:c9:a3:b4:aa:39:5e:ef:f8:85:ce:b1:74:
                    1a:8a:2e:bd:b3:96:64:1e:12:29:7d:3e:22:90:7b:
                    85:8c:b3:34:a5:83:1d:7f:77:e1:98:7d:e2:24:61:
                    11:2a:56:18:0e:c7:ac:0a:08:71:a1:8c:a3:9b:67:
                    4e:04:dd:6b:4d:20:e0:4c:7b:ce:e0:a7:1a:f6:dd:
                    97:01:60:09:f3:b8:98:1d:d0:7c:4e:87:75:03:2c:
                    d2:e4:9d:e2:5d:72:05:7f:9c:f2:20:9c:9e:b9:3e:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:BD:94:9D:B5:FF:4B:9E:92:A2:8E:18:15:E1:22:7C:C3:A3:CF
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:05:40:34:a4:26:bd:ce:6c:ed:b0:4d:7c:1f:99:b4:8f:
         02:ab:e0:ac:4b:cd:92:a1:03:2f:e9:21:ae:28:d7:bf:9a:c3:
         20:87:09:a2:ef:1d:fc:d4:7a:58:d3:ee:bf:e9:43:d7:46:96:
         df:4b:d5:34:e1:54:dd:c9:c3:85:96:3e:bf:7d:c8:ef:3a:47:
         f2:3a:65:6f:5f:1e:8b:65:02:23:9e:e5:7b:0e:b5:c9:db:65:
         84:64:65:9c:92:7c:3a:22:ab:09:9e:1c:fa:ba:79:fe:9a:d5:
         36:16:67:02:6a:0a:27:e5:32:4a:cb:33:6b:39:74:af:c4:7a:
         1d:47:10:8d:f4:46:bf:19:22:05:05:9e:ce:26:67:85:eb:e5:
         c5:13:74:f8:03:31:5f:b1:8f:3a:df:18:4a:06:fa:77:0e:39:
         24:f6:be:78:18:a4:46:6a:8d:fc:8b:93:96:62:da:a4:d0:12:
         6b:55:b7:ad:8b:28:6a:da:99:fe:f3:76:25:87:55:7d:f9:36:
         33:d9:da:9f:46:b0:ca:ac:df:46:1c:5d:d5:74:3a:36:31:c6:
         1f:d9:4c:2f:12:b7:49:94:2a:fe:d4:e5:4e:b4:61:a0:73:0a:
         c9:be:5c:9b:e5:43:da:27:0b:8b:5d:dd:d3:e8:65:af:07:fe:
         26:af:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----