Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File:                     xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier:          vPRxkJ3IfgOyTvITKQpBwiFiZYhpKBTfXHBM93r3Ahc=
Subject key identifier:   D8:71:F7:2A:0E:43:DD:0B:4C:2C:BF:09:74:69:F0:3B:7E:84:C1:1D
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer:       /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial:       01962E987323FE8AF1648352EDF8DD2576CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
                          2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: cPFvYjk8hsC/MMBM8kK4Z+8TFLa2GC5qU4qUj99o2lA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:23:fe:8a:f1:64:83:52:ed:f8:dd:25:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=d871f72a0e43dd0b4c2cbf097469f03b7e84c11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:c3:dc:26:1e:02:ec:fd:91:33:7b:d7:fd:
                    4e:58:7f:e9:27:bf:44:d5:bd:0a:2e:3f:fa:92:f3:
                    f0:70:49:a9:c2:b9:cd:80:01:f6:cb:87:5a:50:17:
                    fb:c4:6f:2c:a0:66:e5:be:4c:a6:cf:44:1f:21:25:
                    7a:b7:44:bd:15:1b:16:ba:fb:c9:41:c4:42:d3:c2:
                    0c:3e:c4:fb:4e:1d:cb:fb:5d:08:18:de:d3:d3:fe:
                    c7:5e:b7:09:95:ee:a0:70:da:82:a2:44:89:e4:da:
                    18:b3:fc:26:b5:0f:fd:e4:4e:e8:f4:25:23:9c:ae:
                    e1:7f:80:d5:ad:c0:7b:b1:48:bc:66:5c:78:e9:b7:
                    51:57:fe:88:46:58:ed:e0:eb:07:de:86:4f:0c:11:
                    02:72:72:a3:05:77:14:4a:5d:68:e4:ae:7d:d3:d5:
                    fd:02:9a:6c:33:9d:73:4b:88:9b:3f:a2:ec:27:6d:
                    07:4d:38:50:dc:09:be:e3:3e:da:25:2b:54:cb:a6:
                    f0:8e:d6:66:9e:49:17:5a:3f:84:f4:8d:7c:fe:1a:
                    b7:35:fd:ee:c3:71:cd:fb:c1:fc:3b:ca:3e:69:0c:
                    d9:4e:6a:0b:cd:55:98:60:dc:e7:c1:8e:1c:8d:23:
                    18:d8:36:c5:e2:e3:3b:e4:39:f6:d8:80:69:0d:22:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:71:F7:2A:0E:43:DD:0B:4C:2C:BF:09:74:69:F0:3B:7E:84:C1:1D
            X509v3 Authority Key Identifier:
                keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:94:ca:3e:cb:43:10:3e:3c:74:e7:dc:d9:43:48:e1:d7:b9:
         3c:80:41:de:84:b8:f0:47:0c:3a:5c:89:d4:96:a9:25:61:b8:
         c4:42:b5:93:75:b0:e0:f7:97:47:61:fa:21:1f:c3:07:24:3e:
         2e:e9:43:ac:32:9b:ce:73:67:af:cc:72:8a:a8:8e:c1:e7:0d:
         a5:26:0d:53:b2:6b:82:df:1b:f5:70:78:71:c8:ad:67:64:d3:
         b0:dd:a9:a8:bf:f2:e1:00:54:b6:e6:76:42:3b:75:45:a6:17:
         fe:46:89:13:ac:04:1a:d5:d3:d7:1d:57:ee:53:41:8e:b9:77:
         52:75:7f:22:3f:87:f9:b3:f8:a8:bf:e1:ee:25:c8:29:a3:ac:
         f0:0a:3d:bf:42:df:6f:3e:66:c3:cf:fa:e0:86:c2:29:4d:8c:
         77:15:9c:6b:45:0f:c2:51:8d:4e:59:71:67:3b:86:0b:df:3d:
         08:f4:8a:f1:ac:65:36:c9:40:7e:18:98:5a:0c:48:d7:30:7d:
         e6:79:09:0d:f3:37:aa:41:c8:ab:1f:e0:a1:19:46:e2:50:df:
         f1:8a:b4:44:f6:c8:3d:f0:d8:93:cf:db:9e:c4:5c:fb:c5:60:
         3c:1a:a6:e9:e4:f1:b9:0c:55:62:1d:8a:2a:b1:f3:ef:53:ce:
         39:8f:cc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----