Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
File:                     XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json)
Hash identifier:          aU31efNPadqoJCzgWlAotUYjO2U4o7oDhCDat7USvbA=
Subject key identifier:   4C:8B:14:40:72:68:59:9F:F6:F2:71:6F:74:71:03:38:C6:E5:AA:6C
Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74
Certificate issuer:       /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
Certificate serial:       01962ECFE2E7748027CF8E911D72682C9FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=)
                          2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: 8qloJmGtYPzBbKcifAsRdUNZIjDVHH+uKtlBuF670hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:e7:74:80:27:cf:8e:91:1d:72:68:2c:9f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=4c8b14407268599ff6f2716f74710338c6e5aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:23:a9:a1:e5:4c:82:22:1e:c4:79:65:80:
                    98:0f:df:4c:8a:ab:d5:a0:3c:b4:09:6c:94:cd:fa:
                    06:c8:b5:5d:de:e2:49:a6:12:fa:17:61:e3:71:c7:
                    b3:7d:7b:ed:a1:1f:21:54:10:22:38:c5:96:3f:44:
                    62:ab:9e:30:a5:5c:fd:42:49:71:76:15:8a:08:0f:
                    79:f6:1d:a8:14:68:99:e5:4a:61:8f:51:16:b6:9b:
                    a8:f6:7d:e9:9e:bd:71:5d:9c:f8:f1:94:56:7b:dc:
                    48:14:0d:35:5b:63:12:37:ba:04:e3:08:bd:8a:c0:
                    20:b6:bc:90:21:a4:7e:6e:7b:e2:6d:53:d8:4e:c0:
                    62:f0:7e:6a:ff:8b:c8:3a:ce:35:d4:a1:77:a7:18:
                    34:02:32:47:04:35:3a:78:81:a9:0c:71:6c:c9:19:
                    83:08:08:64:ff:ec:88:d0:7f:c2:3f:15:bc:af:35:
                    83:c9:d2:51:9f:55:44:92:47:f7:75:c8:36:2c:a5:
                    4e:ab:b2:f1:73:43:fc:94:a4:81:e1:f3:f6:a0:9a:
                    97:50:52:32:7f:76:5d:3f:a3:a9:d6:88:98:35:94:
                    56:f0:5a:d0:51:13:08:5a:08:79:80:86:af:e0:87:
                    12:eb:f1:ea:1c:30:94:62:3b:86:f4:4b:95:36:8b:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:14:40:72:68:59:9F:F6:F2:71:6F:74:71:03:38:C6:E5:AA:6C
            X509v3 Authority Key Identifier:
                keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:af:17:71:91:90:07:04:95:b9:e8:e2:17:6f:dd:7f:fa:
         b0:ae:7b:1d:77:cd:ca:31:c6:c2:03:a1:ea:47:53:f7:68:56:
         35:29:48:4a:dd:9e:73:38:a4:8c:e3:c8:a7:ca:3c:20:02:ef:
         5e:bc:63:cb:3c:fc:8b:f6:fa:13:47:8e:e3:48:2c:f4:ad:12:
         97:a3:f3:c1:68:af:8f:03:2d:85:ec:54:59:5c:f1:0e:a6:02:
         1e:65:a4:b8:1f:62:4c:84:8b:c9:bb:c4:b5:35:71:dc:48:01:
         06:3a:29:8c:52:53:24:38:c2:d2:c6:3c:0f:bf:44:c0:b3:94:
         31:40:7e:76:ea:62:c9:3d:2d:cd:5a:5a:01:27:7f:0e:ab:b4:
         69:e3:34:ea:20:80:31:60:94:f2:84:5d:77:4e:13:60:17:4f:
         f5:2d:10:58:4f:e3:4b:e4:9b:e8:37:84:d8:ef:bb:be:1f:24:
         16:76:dd:a8:c7:24:f2:44:58:cc:f8:03:d1:b0:5e:24:96:c3:
         ab:6a:ba:b7:b6:1c:df:1e:17:27:1c:46:36:9c:d8:71:d8:65:
         47:3e:4f:07:6b:7d:3e:12:0f:c9:ba:5c:86:92:cb:da:fb:f1:
         83:1f:1b:3c:53:d9:e5:c4:51:cd:af:9f:e6:8a:65:e5:65:d5:
         49:84:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----