Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File:                     x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier:          6IF7ui5JqseVyIom0GND83F/JiZyn7npomAu2QYOx2g=
Subject key identifier:   01:E1:F0:84:47:82:A3:B7:71:E5:7A:8E:41:CB:F9:87:E7:4E:72:9B
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer:       /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial:       01962E61F48784B63DBC245F4AA7DCEF209D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number:          0D55
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
                          2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: sTQXBpWnKfEIOl0+IbYys2bGDGWQmP3LdLn1wzfQxhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:87:84:b6:3d:bc:24:5f:4a:a7:dc:ef:20:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=01e1f0844782a3b771e57a8e41cbf987e74e729b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:ec:a5:6c:68:50:79:fd:b6:fc:fd:99:83:
                    fb:18:30:71:3c:39:1f:f2:0d:14:86:f4:e2:50:47:
                    f0:6d:6f:7c:f1:ff:4d:a0:65:da:b2:3b:7d:33:dd:
                    99:31:30:8e:2a:11:65:45:b4:4c:ee:03:7e:4e:84:
                    56:d6:09:df:a2:c4:06:96:ff:d7:4b:7d:4d:b9:a9:
                    44:95:75:fd:f1:21:d9:4d:73:bb:e6:aa:8f:eb:0a:
                    6d:72:0c:3e:a9:53:c6:88:40:31:3d:21:dd:cc:31:
                    f3:c6:22:1b:f6:0d:c4:e6:d4:05:a8:d0:88:73:7d:
                    8c:30:e3:c9:36:42:7a:7a:de:db:63:40:7c:08:1e:
                    95:ee:ff:a9:b0:8f:3c:fe:7c:70:86:1e:f2:a2:60:
                    8f:93:36:c0:5b:fd:3a:ab:7a:ab:45:d0:9e:12:f3:
                    42:d5:32:08:ca:37:ca:b3:5c:31:33:9d:4f:50:d8:
                    8b:d0:d2:17:75:4a:47:33:76:eb:be:e2:7c:81:ee:
                    16:4a:4e:95:af:f9:2e:01:da:ae:79:37:58:73:8d:
                    a0:1e:0d:b3:3a:f7:d0:68:96:29:d2:c2:24:8d:f6:
                    7e:9d:d9:f8:98:be:a4:54:8b:51:d2:6c:82:33:4f:
                    31:16:ca:8d:12:34:18:87:64:19:b4:00:93:38:42:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:F0:84:47:82:A3:B7:71:E5:7A:8E:41:CB:F9:87:E7:4E:72:9B
            X509v3 Authority Key Identifier:
                keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:f7:b6:a8:c6:4c:54:cf:ee:72:74:fa:6f:51:3d:c1:d0:
         d4:0e:b6:88:76:4f:16:ea:29:14:b1:41:85:a9:a6:60:ba:75:
         0f:22:77:9b:64:2d:fa:06:1c:a2:f4:ad:bb:15:7b:13:01:28:
         f7:cf:39:55:e3:8d:db:98:dd:96:cd:6c:23:a7:79:c9:7e:45:
         47:65:7c:f3:7a:2f:f8:e2:22:ae:35:cd:06:76:19:84:1f:2c:
         4b:5e:c0:5a:ef:a8:27:a3:68:57:26:b1:c0:f1:8f:cf:40:e0:
         d3:58:d1:51:3f:1c:84:da:fc:16:c2:cb:09:9f:76:ea:55:e0:
         ef:46:0b:8f:e8:f9:6b:b0:6a:25:e6:42:f0:3e:6e:5e:69:76:
         b6:8b:8a:3e:1f:42:e0:dc:c5:ef:48:0e:09:d4:33:eb:8a:7a:
         b8:21:82:33:b2:1b:05:dd:d8:6a:49:45:e8:8c:53:43:fc:a5:
         f7:eb:31:b7:27:cb:cf:9f:5c:b9:82:41:a0:bf:c3:a9:df:48:
         f2:21:fd:e5:44:21:b9:76:ea:1e:64:52:39:42:81:de:22:e1:
         8c:0a:bd:c7:68:b1:58:62:fb:97:f7:e6:1a:14:02:ad:6e:b2:
         6d:3e:5f:52:ee:94:31:cc:a2:39:91:1f:d5:da:0f:a5:0f:f0:
         9f:46:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----