Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
File:                     XAJzZX7FoThNU28b2Z2RZQf-eyk.mft (raw, json)
Hash identifier:          4pHJpJ+FdMjZ2shM1ejAVp8go6qVmKXyMv5VANXeX2I=
Subject key identifier:   29:97:A0:F4:50:6B:6F:3A:13:5E:9F:64:DC:00:C0:DD:92:60:BA:82
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Certificate issuer:       /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial:       01962E2B1C9CEB30565CEEDF64C6A3392A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
Manifest number:          0F82
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: BjEhACV2yXJRHQhe31y5AzO3--o.roa (hash: IOjD1WKD18GQcde1wwfvHfJUbrYC9FaaN08pCD3XzFo=)
                          2: XAJzZX7FoThNU28b2Z2RZQf-eyk.crl (hash: PQCTc8Xd473cmSNF/Ght6BTweWa9n1HxDq0+MKfrPNY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1c:9c:eb:30:56:5c:ee:df:64:c6:a3:39:2a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=2997a0f4506b6f3a135e9f64dc00c0dd9260ba82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:cb:e3:3f:ba:cf:50:be:3b:61:3c:52:45:
                    9c:84:74:ae:bb:c7:a6:6d:39:f5:d2:52:33:dc:3b:
                    dd:c6:7b:b7:48:70:31:b8:4a:82:c3:4e:ba:df:bd:
                    58:f3:ce:32:78:da:1f:2b:5f:47:1f:86:0b:8c:e8:
                    f9:c6:48:09:bf:81:cd:ae:06:7d:99:73:27:10:0c:
                    14:e0:7d:f7:dd:f4:c7:0e:73:f4:a9:47:82:16:62:
                    83:54:c7:70:c8:cc:d6:cb:85:8a:28:b2:39:de:a1:
                    3d:2b:fb:28:3a:c9:f9:48:9f:0f:74:57:1f:4d:f5:
                    18:9d:12:27:7c:6a:16:44:fd:9c:20:ab:d5:fe:12:
                    a8:8d:68:08:d5:fc:fe:5e:b6:73:d2:21:63:b8:3d:
                    8b:5a:09:e8:a6:68:2f:63:ba:8b:b6:52:ed:00:74:
                    c8:1e:54:a4:6b:f7:50:0a:4a:94:f9:56:5d:14:e8:
                    ee:38:b0:c7:58:74:7a:f7:51:d8:e5:39:c6:3a:49:
                    19:03:0b:14:bc:51:8c:fb:f7:14:78:37:54:2b:f5:
                    bd:4e:5c:d0:d9:e4:ca:92:0f:85:b4:0c:b5:d1:3d:
                    37:c0:82:ee:20:54:ff:5e:52:67:8a:72:ac:34:32:
                    d0:b5:22:ec:26:da:97:18:c2:1a:e3:12:ce:69:a8:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:97:A0:F4:50:6B:6F:3A:13:5E:9F:64:DC:00:C0:DD:92:60:BA:82
            X509v3 Authority Key Identifier:
                keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bc:6c:c9:e8:ba:0c:7e:6a:ea:1a:24:4a:2d:a2:57:6f:36:
         01:57:b2:00:03:37:61:e5:22:98:ca:d1:0c:8b:2e:56:98:29:
         82:64:a6:36:7b:d8:fa:8a:8f:ec:e2:78:65:4c:3a:b9:cf:08:
         b4:90:ba:49:e6:02:9a:a7:f4:88:e1:42:5b:f9:dc:7b:73:97:
         83:4e:5d:36:22:2c:9f:92:d2:30:9d:2b:04:6c:5f:56:d6:91:
         20:9e:e8:20:f8:3d:64:fa:a1:be:e2:c6:e9:08:e3:ef:a1:41:
         eb:f4:70:13:ea:b9:1e:b0:5b:82:ad:32:b6:fc:45:81:a8:7f:
         14:dc:ec:cc:7b:ee:78:ce:6a:87:bd:8b:5e:de:02:0d:c2:f7:
         ae:b8:65:b9:d2:a8:72:9e:b3:a4:94:37:13:cd:c0:9c:59:fd:
         fe:bd:84:9a:40:3d:5e:13:00:61:79:d3:02:cc:16:39:9a:ca:
         50:70:b2:46:cb:32:6f:07:10:b3:aa:ab:ab:07:b5:10:74:bf:
         a6:0c:10:ab:7b:7d:85:51:98:e1:65:9c:d5:81:b5:5b:b1:02:
         e2:fd:11:38:2b:3d:27:f7:55:5b:67:8a:32:51:e1:e1:bc:79:
         d2:d7:a4:a7:a2:e9:a0:5f:d5:f3:d6:18:71:59:b7:8c:09:7b:
         76:72:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----