Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File:                     xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier:          vwRjWBIe70NG/668ecPmQkCGBTt9YLBLBXHAZu91d2E=
Subject key identifier:   5E:AE:3E:0F:91:3B:08:93:85:DE:7F:ED:35:95:77:A8:2E:DE:18:41
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer:       /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial:       01962ECFAD12EAEF1BCDD041AAE643DA1599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number:          124D
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
                          2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: tJCRayqXIyv5JzzSwrfCLyzS4jM4rN97trEY44O6co0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ad:12:ea:ef:1b:cd:d0:41:aa:e6:43:da:15:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=5eae3e0f913b089385de7fed359577a82ede1841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:27:d2:18:59:e8:e1:d3:9b:65:0b:b3:c5:
                    79:c4:95:e8:df:b0:99:58:df:62:87:5e:ed:8d:ef:
                    d9:ff:4a:20:88:55:7c:62:71:15:41:42:e3:25:75:
                    5d:8f:fd:fa:1e:5e:cd:14:a1:63:55:8a:79:f6:92:
                    15:28:dc:f5:28:28:bd:80:db:36:f8:62:8b:93:6d:
                    f1:53:8b:68:38:34:5f:ac:59:1c:20:cf:27:ed:01:
                    05:d3:b5:5e:c8:4c:af:66:8e:02:0d:5c:9e:c8:ae:
                    c4:0b:36:08:37:43:60:84:5a:71:f7:82:8f:03:ba:
                    6f:9b:2b:e2:74:03:10:1f:67:2d:7c:32:0c:55:ea:
                    6f:97:30:7e:8a:2e:ba:55:65:c7:74:08:7d:d3:53:
                    bd:1c:75:98:b2:22:1f:e5:f8:bd:71:a3:58:15:4a:
                    e7:1d:5a:a2:d2:bb:c3:d0:8b:d6:88:5a:e1:23:6d:
                    3f:1e:09:a1:be:d5:f9:20:f7:ed:11:50:9b:78:46:
                    cc:2f:73:f6:3d:1a:d0:f6:5f:e5:ca:9b:f3:ac:19:
                    eb:c5:0f:3d:1b:90:a4:a4:ec:14:cf:a9:97:e1:08:
                    8c:8a:6f:63:16:55:8f:34:0f:33:6e:75:ad:74:3a:
                    9d:c8:07:d2:50:67:9b:e8:06:39:19:f3:54:2b:12:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:3E:0F:91:3B:08:93:85:DE:7F:ED:35:95:77:A8:2E:DE:18:41
            X509v3 Authority Key Identifier:
                keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:09:e0:77:03:72:82:4c:c6:ae:9e:c7:6d:98:39:61:28:
         e5:99:a6:22:a0:0e:75:fa:f4:64:ec:e7:e2:70:d4:cf:1b:39:
         c5:2c:5f:77:3c:a8:83:3c:71:4a:cd:4e:08:b6:48:40:81:a0:
         06:77:ad:00:63:cc:e3:5d:c5:cd:8b:23:d7:d3:70:a4:f8:b3:
         92:94:42:cd:0f:0e:1b:1f:2c:3d:d2:e7:b7:57:21:08:c9:cb:
         46:8c:c9:2b:82:d6:70:45:49:82:66:cb:e1:8f:0d:2a:dc:f3:
         c1:da:6a:17:d9:a5:37:b9:68:b4:87:07:3a:92:e7:98:d9:be:
         b2:fa:a4:ec:6d:82:01:cf:98:7b:95:df:be:2e:2b:e2:c5:64:
         a8:d5:2d:05:a3:02:94:ed:26:55:23:7c:e4:e1:5f:64:50:20:
         6d:a5:c7:72:80:b1:e0:0b:dd:61:5e:75:cc:8b:63:5f:5e:6b:
         67:b8:58:4a:04:c3:45:9a:c6:5c:52:88:c2:94:98:21:aa:64:
         1c:91:52:bc:f9:4b:e9:7e:8f:9f:92:16:61:72:8c:05:f3:a6:
         2d:54:b1:1d:bb:12:7d:90:2f:d5:43:c2:5b:ce:93:6c:12:5b:
         a7:f8:9d:4e:63:f3:77:bc:9b:3e:4c:c6:7d:be:ce:6a:87:76:
         f9:95:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----