Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          x0jbJuVekrLArJTq0GBMsCfLaykHWuXER73Lxko90GQ=
Subject key identifier:   D4:CF:8E:0B:6E:25:F4:34:ED:BA:F2:F8:B0:62:DF:A9:C2:24:45:54
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       01962E61A575DF4BB2EDA23652E97C93EFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          09DF
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
                          2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: Wita6qmoRjsJqSzYQts4duwdSvCuax6OR5cB08jKcA0=)
                          3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
                          4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:75:df:4b:b2:ed:a2:36:52:e9:7c:93:ef:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=d4cf8e0b6e25f434edbaf2f8b062dfa9c2244554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:99:dc:e1:84:59:6a:5f:d5:2a:df:b4:21:
                    8c:9e:2b:9c:b7:b2:9b:02:2d:9b:43:96:ef:b4:00:
                    e0:bb:dc:4e:6c:45:10:2a:70:00:63:0c:8d:01:37:
                    00:ec:56:63:58:73:64:46:80:5c:c5:49:04:e8:5e:
                    fe:84:d3:fb:b2:c2:c0:47:0f:e5:5f:c2:65:af:a7:
                    7c:21:29:54:7e:99:16:74:42:83:49:ec:b6:d5:11:
                    81:86:51:92:b1:86:e7:af:e9:8f:54:b2:5d:8f:8f:
                    27:1c:5e:2a:ec:a3:41:f8:d3:92:43:44:db:6b:b1:
                    4d:fc:45:70:65:9e:b9:a0:ef:8f:1d:b1:e1:2d:ad:
                    44:1e:3b:be:74:db:f3:a3:cd:ec:b3:a6:6d:7c:3a:
                    b7:9f:06:6c:c6:3e:7a:ae:a5:5d:0c:52:ec:8c:c6:
                    0d:70:66:45:77:0e:fe:21:ce:1b:e6:09:b1:f5:a4:
                    48:44:dd:f3:c8:88:db:00:ef:2a:6a:a2:e4:97:b1:
                    2e:8d:96:96:42:ea:fd:4f:2a:49:90:60:33:2c:ea:
                    1b:16:61:6e:89:e8:7b:15:d2:1e:59:7e:34:2a:fe:
                    91:84:4a:77:eb:ec:8b:9e:e6:6e:bd:47:d9:0c:04:
                    98:4f:d7:c3:66:3e:98:29:65:19:82:1e:33:27:b2:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CF:8E:0B:6E:25:F4:34:ED:BA:F2:F8:B0:62:DF:A9:C2:24:45:54
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:d2:5f:ba:d2:be:82:2c:e1:fc:19:25:3c:ae:32:be:b2:
         7a:42:5c:79:ea:22:2e:b0:a3:c1:5d:a8:af:55:43:9c:a0:bb:
         aa:16:70:e7:a5:18:1e:c1:16:96:12:8e:9d:9c:22:3e:55:e1:
         a7:3c:ff:bf:84:60:b9:ad:d8:78:66:a1:7d:d9:4e:13:30:2d:
         18:2d:ef:17:14:dd:f6:4b:82:45:89:66:73:8e:c1:f1:28:fe:
         84:b0:bd:c5:dc:a0:00:1b:dc:ec:38:d8:70:a8:39:65:9c:88:
         ea:9c:9e:17:2b:0f:17:95:1e:65:4d:7e:78:77:4d:aa:e0:10:
         3f:3c:d9:69:4e:30:72:74:d9:65:5b:62:0c:5e:3d:08:8b:5c:
         40:e8:5a:2a:64:a4:fb:92:3c:47:b4:a6:a2:6d:9c:c9:f7:7f:
         e7:15:fc:00:5a:49:e5:f1:de:a9:2f:31:2c:73:68:b4:8f:fd:
         d8:48:16:97:0e:cc:c1:91:46:af:96:42:65:42:b2:a6:cc:28:
         d0:9e:03:9a:4b:3b:70:52:64:e0:d8:2d:e5:af:d5:8f:d0:4d:
         fa:0d:2a:c3:e5:ed:74:53:65:a0:f4:f8:7e:2e:d9:49:67:c0:
         1c:64:50:27:36:9c:91:ed:9a:b9:c4:cd:10:dc:7c:dd:b4:a4:
         e7:82:b5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----