Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File:                     xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier:          +bSInviOhA5TcT3xZFDJ0xD65Ci1eNNAdaBjiAYiQNc=
Subject key identifier:   09:28:93:BC:78:93:F0:24:2A:31:BD:CE:1D:7D:A7:43:18:17:08:CB
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer:       /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial:       01962ECFA83A95486CE9A690465AA43C0FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number:          01D0
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
                          2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: pdrNI4JmnBy0WnoDh1LulcDcVFyTQqJTb0S2WWr/W5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a8:3a:95:48:6c:e9:a6:90:46:5a:a4:3c:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=092893bc7893f0242a31bdce1d7da743181708cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:05:4b:98:82:75:d4:de:d3:4e:f4:13:a5:
                    e3:08:1f:eb:58:4d:6d:1d:0c:32:0e:04:b3:e3:57:
                    84:42:a6:20:7c:11:fa:67:61:c4:c2:d4:c7:73:22:
                    1c:20:23:4f:53:b4:88:f6:c7:d8:f3:8e:5b:b9:5b:
                    03:44:74:11:a9:32:d9:3c:a4:5a:4a:20:d8:55:91:
                    80:55:ae:91:98:ad:21:a1:4f:07:f0:64:de:98:1b:
                    96:e1:70:f8:72:1a:09:5e:5d:76:e4:1b:0b:d9:bd:
                    57:bd:38:d7:3d:e3:af:ec:eb:9b:20:50:ad:d3:2d:
                    41:f8:e7:bf:ce:49:88:55:99:e1:cb:ff:d0:9e:dc:
                    cd:6f:46:23:8e:2c:56:27:ce:ba:ab:fc:94:32:d8:
                    da:28:e4:ff:2f:39:bb:27:de:b8:77:45:e7:7c:72:
                    91:99:c6:4a:95:a6:c8:f2:26:69:8f:4c:8b:77:9a:
                    9f:ee:52:9f:cb:b0:69:29:02:64:6f:d9:31:42:0a:
                    17:9a:28:08:78:63:a3:92:85:7d:3d:c0:0e:6a:ac:
                    8a:b7:fc:b3:a3:0c:1f:45:03:62:32:ff:01:9a:65:
                    43:40:88:98:3e:5f:53:32:b2:e2:3a:af:c6:da:1f:
                    19:75:18:8c:bb:ff:66:a4:54:6a:6e:49:36:2d:3f:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:93:BC:78:93:F0:24:2A:31:BD:CE:1D:7D:A7:43:18:17:08:CB
            X509v3 Authority Key Identifier:
                keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:bd:07:bb:c9:49:aa:71:4f:f7:24:c7:77:ba:eb:aa:18:
         56:d9:e0:73:ec:57:15:25:eb:87:84:16:8f:69:f6:6f:ab:53:
         57:f2:8b:5b:5e:50:61:26:62:84:81:c9:4c:91:aa:d7:f3:09:
         3e:14:67:f2:b0:ae:c5:29:31:1a:37:eb:7c:e8:f4:ac:39:99:
         ef:f8:dd:0d:09:bc:95:61:bd:cd:7b:66:03:43:3e:3b:93:33:
         33:70:5b:7c:ae:de:3d:51:70:21:88:46:8a:4a:23:d3:2a:a4:
         47:d2:1e:67:76:81:1f:c8:db:5d:a2:ce:05:0e:0a:de:d5:a7:
         65:15:68:13:6a:86:84:13:ec:b4:dd:ee:c0:fc:08:a9:32:f1:
         91:0d:95:8f:c2:1d:23:5e:db:ae:e1:0c:77:1b:39:ad:3d:fa:
         23:0f:39:93:1b:63:e3:1a:7a:55:2b:9d:02:a0:47:ec:7a:b2:
         06:28:c7:27:aa:b3:25:cf:91:15:1e:ee:06:97:8b:b8:d9:b7:
         fc:2f:ea:94:03:58:64:07:77:d7:26:2b:e1:06:f5:8b:d3:1f:
         3f:29:46:bb:30:f4:31:00:ff:a0:68:1e:a6:54:fa:18:d3:9c:
         00:5f:b5:8d:7d:a1:b0:36:dc:82:98:a6:5a:23:da:9d:e1:d4:
         f5:52:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----