Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File:                     XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier:          jwfJepZL/HGJL9c0MYS9fLKdFqzXhvTAsHGkiCO5x2g=
Subject key identifier:   7D:54:DC:F1:BD:9C:41:49:50:20:D6:5C:AE:64:C4:D3:0C:7B:53:31
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer:       /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial:       01962E2ACCD439AAF5F8A1F9EC7F730C1785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number:          B8
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
                          2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: JmwCfBXXMENqZM/Q7IvTX6Cy0a2nVkM7myPlbVKO5vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cc:d4:39:aa:f5:f8:a1:f9:ec:7f:73:0c:17:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=7d54dcf1bd9c41495020d65cae64c4d30c7b5331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:9c:8c:87:16:21:f2:24:b3:ab:37:9b:60:
                    03:8e:98:55:28:49:61:01:ce:97:0a:fe:1c:79:ef:
                    55:41:2a:20:b2:9d:75:e4:1a:0b:45:6e:94:04:e6:
                    97:1c:89:b5:96:1c:45:5a:e4:59:e5:39:88:be:93:
                    6c:bf:11:3f:f9:d8:86:08:4b:6c:97:b2:a2:5a:cd:
                    1d:78:b6:ca:57:b8:85:b0:7b:cf:01:b1:e9:59:64:
                    99:94:d3:10:ff:7e:6d:48:d2:99:97:d0:57:93:e4:
                    d6:13:4b:4d:ba:a3:97:d8:5b:ca:19:93:71:d2:d2:
                    63:79:18:c4:b3:aa:a7:63:7a:29:40:a5:05:39:9b:
                    29:5e:87:31:d7:a7:f6:ca:e3:35:fc:9f:61:de:02:
                    05:31:45:05:2b:db:26:19:04:6c:38:e7:2f:a5:90:
                    ac:e9:06:c0:cf:c6:f7:f6:98:1e:2c:cf:69:d8:6f:
                    a7:db:a3:a1:f4:4d:f7:c2:da:9c:65:de:80:47:80:
                    da:0f:5b:4f:a1:e0:2a:43:fb:75:8e:ee:c1:ce:c9:
                    29:42:6f:a2:79:45:6e:1d:45:96:bf:de:5f:65:a3:
                    7a:95:d1:ba:2e:76:bc:a7:f2:12:b5:fa:bc:f3:89:
                    9b:25:47:2a:86:dc:a0:14:e6:35:e0:29:6f:e1:99:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:54:DC:F1:BD:9C:41:49:50:20:D6:5C:AE:64:C4:D3:0C:7B:53:31
            X509v3 Authority Key Identifier:
                keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:39:53:78:45:24:b8:a2:96:a3:19:15:57:18:70:d0:5b:
         1b:c6:48:5c:d0:bf:5b:a9:1f:82:9f:4d:28:b5:c1:2f:d5:ac:
         7b:e6:55:2c:8c:bc:ad:44:01:8d:fa:ec:df:07:8d:1c:10:53:
         a8:1f:58:44:b3:f6:23:0f:92:4d:7f:2c:f5:1e:03:4b:72:1e:
         2a:a4:98:8c:53:4d:67:1b:36:cd:b6:fd:b5:bb:eb:c9:1e:43:
         b0:e4:27:99:47:fe:87:44:52:9c:31:dd:3c:e4:cd:b9:a6:a9:
         9d:c5:04:2d:e3:e2:19:5b:00:49:7c:70:b2:59:47:24:89:b1:
         06:ea:1f:2b:35:93:a8:b0:f2:60:d8:22:9f:74:65:e2:c1:11:
         e1:ea:79:86:31:16:d9:f1:74:7a:f1:3d:b2:dd:c8:15:4e:51:
         9f:92:13:7b:80:7d:17:04:2d:85:83:d2:70:9c:e3:8e:c2:69:
         ad:7c:7f:52:5d:59:fe:66:a9:92:51:e5:e0:95:8d:a2:e0:9f:
         ba:5f:de:f2:78:16:82:20:ce:11:84:24:8f:92:c4:a3:13:00:
         a1:e3:cc:2e:70:b3:7c:35:c3:c2:98:d9:c0:92:ac:c6:a2:c1:
         49:0a:90:0b:ad:58:80:1b:69:3c:52:a6:e8:a5:72:4f:b2:a6:
         ac:82:61:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----