Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
File:                     xRCtRomJb7hQznkP3-NE1MAnpa4.mft (raw, json)
Hash identifier:          1gamDlOTUq3wjPgEI7hSAIyaQqhXxpKWb0zm51NhR6o=
Subject key identifier:   AF:52:67:BF:2F:AB:F3:27:18:44:4A:A1:98:18:F3:0C:48:DC:A4:A1
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Certificate issuer:       /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial:       01962E2B4E22521C38021B237E3EF0EC78C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: h0xiomEz7xtLYsv88aOYGmA0lnI.roa (hash: BAw5E4Ocz44eNDbC47J9c+7M/I/mZ/R9N04y5bk6RWw=)
                          2: xRCtRomJb7hQznkP3-NE1MAnpa4.crl (hash: x8J0vJNLgTquL6tSggLYb8LwiexJ8xcqzB+jqiV4VwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4e:22:52:1c:38:02:1b:23:7e:3e:f0:ec:78:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=af5267bf2fabf32718444aa19818f30c48dca4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:d7:af:22:6d:9a:0d:c6:37:21:a9:41:1e:
                    15:0c:a0:13:fd:11:ac:0c:c1:dd:23:f0:e4:9e:6c:
                    54:5d:f5:1f:b8:a4:56:9a:1c:c4:fd:a0:db:51:cc:
                    c5:3b:e5:85:10:7e:33:3c:d5:ac:3f:ca:17:52:55:
                    6f:91:e6:b7:0f:ef:21:8a:9c:b4:8a:2d:17:06:f9:
                    3a:a2:0d:37:27:12:02:0c:26:8c:59:42:ba:1b:70:
                    76:d8:94:48:2c:e5:36:c8:35:33:4c:7e:06:52:db:
                    50:2e:d2:fc:2a:8f:00:70:21:bc:f2:b3:19:31:5e:
                    06:bf:d0:67:e0:dd:78:c7:7a:07:09:f6:00:cd:93:
                    1f:37:44:dd:74:bd:c3:7c:27:43:a8:86:33:28:16:
                    49:5e:97:06:5b:d3:15:4a:90:34:32:0d:91:57:be:
                    ab:62:ee:71:36:73:52:64:53:99:08:74:46:db:63:
                    fe:ba:74:2b:e3:5c:cd:7c:42:07:fc:d9:29:d6:09:
                    6f:34:27:2e:22:59:9c:33:53:46:92:78:37:10:f0:
                    84:70:41:b2:46:bf:47:e0:d9:9a:dd:28:e3:65:ed:
                    7e:7c:2e:ef:9d:18:3f:b7:5e:ae:67:ee:77:a7:02:
                    f6:9d:a6:bb:1f:cb:85:64:42:24:46:3f:e8:46:fa:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:52:67:BF:2F:AB:F3:27:18:44:4A:A1:98:18:F3:0C:48:DC:A4:A1
            X509v3 Authority Key Identifier:
                keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:1c:47:65:f3:45:0a:c1:22:df:c5:67:41:77:c7:a2:bf:
         0f:0d:9a:3b:db:67:1b:dd:3d:39:fe:b3:59:c0:28:0e:a4:92:
         8d:b9:f5:34:52:48:ba:3b:73:3f:b6:d0:27:c5:c3:12:83:ac:
         29:2b:9e:89:9b:92:0b:2c:9e:25:2c:47:a9:84:ad:59:7c:5c:
         a1:44:b1:69:fd:0a:a7:d9:dd:5a:c0:fb:62:da:b5:8a:81:90:
         28:dd:21:3b:8c:61:97:31:a3:5f:28:96:b3:72:ab:99:07:18:
         7b:15:b4:ae:3b:8e:8f:02:b6:8e:db:c9:b5:24:21:79:60:e9:
         ed:ca:15:7d:48:78:23:4d:50:b4:7c:b2:44:76:15:62:67:4b:
         5b:ae:f5:db:3e:5d:09:1d:11:32:03:ce:79:f7:68:0f:79:0b:
         5d:0c:0e:56:2f:f7:fa:7b:6a:fc:38:5c:9c:44:16:2a:96:2b:
         5c:01:10:39:66:0b:32:df:15:4e:4d:a0:18:39:7a:f7:aa:2e:
         41:3b:9d:d8:f7:b2:c0:06:cb:29:1b:c6:00:0c:91:5a:25:5a:
         0b:1a:bb:66:14:49:fa:82:d1:27:cc:96:f3:a0:c0:ff:18:ed:
         86:80:ec:96:38:ea:89:51:b9:5b:13:93:40:be:18:b1:59:b4:
         9a:17:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----