Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File:                     xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier:          8vCT0V63erjIO0Y1f/dCI9c3bpv9LoTXZrkhhoKWcOk=
Subject key identifier:   5E:0C:2E:F9:D8:D5:5E:9B:BE:2A:AE:A5:AD:C7:43:FE:DA:A3:98:74
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer:       /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial:       01962E98F074E9BCF433A77C95E6C4B4FCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number:          0F07
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
                          2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: diLPdAtcT2jjjxbVVz/43ZlxwvVW/bMxfCmC+iUZfgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f0:74:e9:bc:f4:33:a7:7c:95:e6:c4:b4:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=5e0c2ef9d8d55e9bbe2aaea5adc743fedaa39874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:2f:61:68:17:79:98:ef:9c:9c:ca:6a:64:
                    eb:b9:c4:82:65:87:9c:b7:66:02:b5:20:d6:5a:db:
                    b1:e7:2d:47:99:73:c0:67:45:ab:7b:65:b2:a4:ff:
                    2a:2a:aa:9d:23:be:98:cd:de:45:8c:2a:ef:57:8b:
                    a5:28:80:9f:f4:8f:49:38:ab:09:51:49:27:2f:d4:
                    32:da:37:bf:1c:b7:55:06:da:93:36:df:de:3c:4c:
                    c2:63:aa:43:3a:6e:73:43:7f:fc:8a:4f:37:ad:4e:
                    8e:f6:0e:59:e7:11:aa:1b:1f:78:ee:ab:21:07:ed:
                    45:94:1b:f5:e6:7c:e9:c8:a5:a3:e5:fb:87:a3:c0:
                    14:da:31:0a:6e:4c:96:c6:2a:d8:06:ef:2a:0b:8b:
                    80:b8:8e:0d:86:ca:3c:b2:91:a2:69:84:73:b0:05:
                    cf:40:a0:ee:b1:c8:d2:70:d7:2e:57:1c:6f:14:30:
                    0c:95:6a:e4:ae:d9:38:2c:bc:13:3d:9c:90:f7:82:
                    58:c8:e8:69:5a:a1:87:e6:15:23:ed:3d:9c:c3:4d:
                    fc:17:d9:16:c8:00:59:83:ef:80:b2:12:03:72:03:
                    56:94:2d:7f:e1:55:e4:81:b6:0a:f3:ff:53:e0:7e:
                    c8:18:32:0d:d2:1d:94:74:e1:a4:c6:41:af:78:05:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0C:2E:F9:D8:D5:5E:9B:BE:2A:AE:A5:AD:C7:43:FE:DA:A3:98:74
            X509v3 Authority Key Identifier:
                keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:27:d3:e8:9c:13:6d:b0:c7:ce:07:c5:8b:a9:34:7b:5d:ec:
         33:f7:a0:95:1e:01:1b:1e:59:41:77:6f:d7:bc:6e:d4:84:a7:
         d9:a1:af:b2:01:7c:99:5b:6a:2a:3c:65:c2:ea:3f:da:ee:27:
         8f:a9:25:60:10:52:12:0d:10:76:4b:e5:ff:b6:5f:ec:f0:8f:
         72:c8:6d:6d:a0:90:0d:f8:1c:b3:ea:5c:5c:70:33:64:9c:57:
         6f:ea:eb:2b:73:09:88:8d:79:cd:29:bd:b2:a4:75:00:d7:0e:
         03:0b:d3:69:8c:48:71:7b:5f:3d:dd:95:d8:40:27:48:10:f5:
         f7:5f:aa:61:57:89:d3:db:c1:5a:f2:55:97:c6:4a:69:de:b8:
         d2:10:4a:e6:91:93:c1:e6:8d:5c:74:32:a8:f8:72:5f:d1:4e:
         37:3d:a5:e1:51:b8:76:f3:dd:ce:d5:4a:4b:4d:6b:d0:56:ed:
         87:cb:a2:bf:79:3a:23:f9:c1:0d:76:92:1b:16:b2:45:31:5b:
         3e:02:82:df:a9:bd:bf:33:0a:2c:39:a0:7d:63:26:8f:98:92:
         ec:5d:9a:7a:ec:d6:93:c3:a2:db:9e:13:da:89:52:fe:1f:56:
         33:2f:2a:f3:56:8d:c5:92:80:6a:e0:2a:73:31:b8:53:5b:45:
         ae:32:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----