Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File:                     xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier:          lDoj2dXNJSwbaxu/J8FW4vlsmDDiXqawyRhT/eJsNg4=
Subject key identifier:   83:83:4B:53:C7:D9:A0:4F:4A:DA:A0:46:51:9A:16:1D:73:FC:35:46
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer:       /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial:       01962F3DA22AC9C00BBCC1FCF01AF1714A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
                          2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
                          3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: rk/tOzOEgd82DHJHbTknvyWdMAFgLMFTPl9b4cCYxZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a2:2a:c9:c0:0b:bc:c1:fc:f0:1a:f1:71:4a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=83834b53c7d9a04f4adaa046519a161d73fc3546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:14:40:38:c3:ab:5c:5c:5d:9a:e0:3b:3a:
                    1a:4e:49:a9:05:bc:fd:c1:f8:b6:92:f0:5e:e5:2e:
                    9b:32:44:ca:5c:15:ea:45:83:df:b0:4d:56:e1:0d:
                    d9:19:74:f0:bc:f6:48:a6:66:b1:44:27:16:e3:da:
                    6a:4b:85:e7:ee:fe:91:69:ee:b3:b6:b8:51:e2:dc:
                    c2:f2:a5:8d:6c:03:e5:ac:f8:08:cd:08:c2:ae:05:
                    ad:53:70:97:bb:70:de:1e:4b:b6:6c:bd:1d:19:7d:
                    b5:3d:45:71:a1:97:35:62:9d:13:80:e8:b5:2f:97:
                    63:3c:21:bb:cd:ef:47:21:2c:bf:44:1b:cf:45:9f:
                    e0:91:ee:a7:db:7d:f9:19:d9:91:6c:49:dd:59:08:
                    dc:9c:94:36:8c:98:f2:d2:33:c5:4c:9c:33:70:12:
                    50:df:53:14:8a:3e:31:07:a0:b3:2f:20:2a:6c:9f:
                    44:c8:e7:84:0c:a9:de:12:e2:3f:51:fe:e4:19:ce:
                    61:5a:09:75:b4:a0:ad:69:5e:03:9a:4c:e1:6c:3d:
                    b2:0b:58:2b:d6:53:fa:a7:e4:e0:b0:e2:72:2a:fb:
                    59:b7:50:53:0b:c3:2c:15:6f:9c:7d:5d:4a:19:03:
                    15:f7:1e:9b:34:d9:d7:8b:f7:a3:27:64:d1:7c:dd:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:4B:53:C7:D9:A0:4F:4A:DA:A0:46:51:9A:16:1D:73:FC:35:46
            X509v3 Authority Key Identifier:
                keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1d:4b:3f:d4:13:7c:35:2a:4b:1c:30:7c:02:9e:74:59:ba:
         5c:b0:c5:18:15:fe:88:18:5d:a4:7e:bf:67:95:3e:51:a7:cf:
         be:1a:98:4c:d6:73:08:0c:84:20:73:5b:18:10:2a:f0:b2:57:
         35:5c:d9:fc:b2:ce:99:9b:b5:bd:31:b6:2a:64:99:3c:64:15:
         c5:e2:0d:5d:30:8a:da:a3:2d:6b:ea:22:d8:73:0c:27:61:de:
         e2:84:87:72:44:be:0b:2f:fb:9d:62:66:66:a8:a2:40:fb:54:
         2d:5f:e5:85:18:ef:13:b3:e0:3f:e4:fd:15:1c:e0:43:53:b6:
         2d:20:f9:35:43:19:79:27:d4:5b:de:fd:de:4f:80:6f:7e:11:
         56:dd:82:63:ed:8a:e5:2e:11:db:4c:0d:10:5b:b8:57:75:38:
         be:2f:c8:4d:87:ea:68:a3:89:6f:c7:e6:8b:28:97:b5:35:bb:
         ea:ec:b1:51:ad:01:1e:1f:93:2f:37:9b:5b:d5:23:7e:ce:8e:
         ff:1d:63:5a:9a:e4:cc:e0:92:59:d3:70:db:a8:ac:c7:9d:25:
         65:76:a5:5d:1b:83:35:86:15:4f:d1:11:51:ff:7d:84:74:87:
         f7:35:f8:15:f3:52:6e:a2:69:0a:9d:e2:8f:f9:0b:0f:a3:bf:
         26:ff:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----