Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File:                     XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier:          IAUkrodNwm5QbxIqQY5sPa8XGhmEhBSOVEaLW7y3/LY=
Subject key identifier:   F1:A8:53:9B:E8:42:4F:AB:ED:E0:52:C2:BA:5B:0D:16:E3:C2:8B:72
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer:       /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial:       01962E61AEF7DC272C497211AF26EB8C3297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: nAT8VKRsKCHYQ1Vqnhacz4fKzhNGI4NdSCGcG8FWHi0=)
                          2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:f7:dc:27:2c:49:72:11:af:26:eb:8c:32:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=f1a8539be8424fabede052c2ba5b0d16e3c28b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:11:9b:0e:43:61:78:18:81:6b:b0:9e:1c:
                    c8:87:9b:e8:80:b0:da:51:61:af:57:56:7f:50:56:
                    c8:f3:24:82:85:38:6a:fe:0c:af:b5:bb:b7:97:83:
                    21:4f:0c:96:5f:65:6f:dd:30:06:ad:1c:e9:18:5a:
                    7f:69:64:cf:ad:55:75:50:f3:7c:cb:00:4a:63:69:
                    1b:7e:9a:fd:64:75:a4:4f:c0:68:13:df:84:ed:6c:
                    dc:d8:e9:16:ef:98:d6:b9:12:7d:f5:d9:37:cb:ec:
                    ac:d4:90:6b:e3:95:37:92:52:db:b7:a2:b2:01:57:
                    d4:aa:cd:3e:09:95:b9:d0:49:bc:d6:42:7a:1b:88:
                    e4:b4:d4:9d:25:86:59:ed:ab:84:71:f6:72:68:09:
                    62:80:a2:67:09:3c:7a:38:7f:05:03:a4:df:04:48:
                    8d:65:82:1c:17:19:21:6c:3d:9a:64:95:4c:ec:0d:
                    0b:5c:5e:aa:68:3c:33:d4:c7:64:81:52:e3:e3:a9:
                    eb:11:54:53:33:09:e8:da:42:0b:92:ed:69:3a:8f:
                    27:39:6c:2f:53:04:c0:10:9a:e4:52:fe:fd:ea:6a:
                    01:43:b8:e0:ed:b6:27:40:d0:76:58:88:36:a6:8b:
                    0e:b8:b4:ec:1a:db:fa:c8:28:9f:b3:9a:e5:f6:83:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:53:9B:E8:42:4F:AB:ED:E0:52:C2:BA:5B:0D:16:E3:C2:8B:72
            X509v3 Authority Key Identifier:
                keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:02:81:8e:e0:c5:e2:57:96:5c:bb:6e:68:12:19:9a:35:
         d7:08:08:18:82:ef:4c:6a:4e:f9:b8:ee:28:5a:12:b5:ef:c6:
         ce:ec:bf:41:d3:e9:b8:f5:6e:7c:65:eb:cd:d4:ad:2c:da:96:
         18:6e:59:5d:6e:0a:73:7c:db:27:dc:19:07:66:8e:91:0a:49:
         dc:56:db:95:06:ca:bf:65:6f:1b:26:18:62:fb:55:7c:44:b7:
         48:5b:a1:27:f5:59:d2:bc:bb:55:f3:61:ce:37:ca:fc:a4:8e:
         02:ea:a2:03:62:73:29:51:ed:9b:7c:82:e3:8a:58:00:32:c6:
         8a:27:3e:ef:23:7b:e3:03:45:25:3e:a3:86:31:ca:e9:3c:d9:
         cb:38:c4:29:12:58:7e:b6:26:88:08:18:bc:6c:96:50:2d:fa:
         24:11:21:b0:2f:75:b1:59:90:40:e9:08:7a:d1:ad:f7:dc:f3:
         83:6c:0d:b5:96:49:a0:25:d2:f9:c4:f9:74:e2:7a:d3:8e:3a:
         8a:c1:33:cf:93:1f:3c:f7:c3:46:76:89:0b:05:64:33:68:66:
         3d:6e:be:e1:1c:d6:fa:94:3b:41:5a:1c:6d:7d:7f:c3:55:b0:
         05:29:d2:cf:89:c5:f3:31:f0:c0:63:34:79:41:38:d4:83:8c:
         8d:48:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----