Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File:                     XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier:          vUhwQAKX4eUMLMJKkxedGkn70YDUTw1gzizna1aNvhQ=
Subject key identifier:   43:BC:E5:58:13:ED:8D:30:99:8F:18:2B:DB:0B:DA:7F:5A:6B:22:7C
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer:       /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial:       01962F7456D6F1BCA4D531947010B5D1ABF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number:          0369
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: rN/B/1NSsx979ADIPtQMfBN3yGzXDeZ/OjgI31Fqd6U=)
                          2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:d6:f1:bc:a4:d5:31:94:70:10:b5:d1:ab:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=43bce55813ed8d30998f182bdb0bda7f5a6b227c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:f3:3c:94:07:8d:56:d7:fa:8f:6e:50:e2:
                    87:9c:f6:65:c5:ae:f9:03:89:68:05:25:f5:62:35:
                    41:c4:cb:60:00:5d:79:e6:ab:7f:2b:34:3e:c5:fb:
                    2b:6b:f8:57:f7:55:01:de:b5:c8:2e:e1:77:b0:38:
                    c7:41:b2:37:b0:3b:7c:6c:0a:37:72:86:3b:b5:0b:
                    ed:8e:ee:5a:df:16:91:27:d6:42:49:8d:17:8f:c1:
                    b4:c6:89:87:0b:95:80:98:84:61:87:4f:7f:b1:25:
                    93:fd:4f:f3:c0:21:53:92:05:3e:07:de:f4:1f:33:
                    d3:03:42:31:5d:06:5a:db:ca:90:99:05:d0:35:69:
                    45:b5:05:07:bb:cc:1f:41:2b:24:6b:f8:fc:2d:e2:
                    1f:88:52:56:e1:31:a2:24:11:a8:56:0a:37:03:c7:
                    c7:ad:cd:69:07:3e:97:0a:00:bf:ff:a5:b6:8b:86:
                    43:c4:a9:11:cf:f0:3a:40:27:2b:23:8b:cb:1c:d4:
                    0a:a2:2d:64:af:d5:fc:79:78:45:46:c4:35:80:23:
                    cf:f5:2d:ca:ed:a3:15:46:b8:8a:aa:48:6b:b2:9c:
                    10:a5:ef:99:62:04:bc:b9:08:22:57:b3:8f:33:2a:
                    0f:00:fe:6b:21:88:50:4b:45:52:3c:84:f4:65:30:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BC:E5:58:13:ED:8D:30:99:8F:18:2B:DB:0B:DA:7F:5A:6B:22:7C
            X509v3 Authority Key Identifier:
                keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:f9:3c:17:04:ee:31:29:39:de:cc:1c:a3:1f:8d:55:43:
         2a:23:ec:b2:13:7e:68:96:70:c6:ed:89:08:83:32:d2:e1:f2:
         9d:2d:cf:15:72:a3:f3:a9:a6:c5:39:81:cf:0c:b0:2d:0e:70:
         1b:32:66:a6:6a:56:65:88:34:bc:12:b5:ac:da:a3:c7:5d:5a:
         05:28:bc:1b:52:ad:a6:08:d4:c4:dd:a7:56:54:5b:e1:c4:78:
         fb:20:d3:48:56:bf:11:89:34:04:8d:bf:4e:aa:a9:43:78:c3:
         68:a6:9f:20:c2:07:4c:6d:a9:32:e5:df:5a:b0:6f:4b:5f:f3:
         6d:94:6a:c5:5f:f0:f6:28:6b:42:97:7e:bd:73:c4:4e:a5:ca:
         c6:ba:19:a4:60:12:0f:95:87:83:2f:5a:10:4c:78:c6:3c:f0:
         24:7b:60:5f:61:52:62:e6:b8:58:3f:45:66:c3:54:5f:ce:03:
         05:7c:a4:7c:2b:e9:49:ce:42:1c:86:ce:78:95:b6:94:0e:ed:
         be:13:81:15:16:80:17:a3:54:4f:0b:05:a3:c8:2f:4a:7f:d2:
         96:2d:f0:b1:55:2b:37:8c:66:c2:b2:5c:fe:fb:7c:56:60:1f:
         71:b4:4b:0d:32:1e:a8:6f:1b:f5:55:20:e7:8c:9c:17:15:26:
         13:27:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----