Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File:                     XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier:          SPdWRk8JkogdZWWcTNPA/gil6eXnZd7jleuOSgYDH4c=
Subject key identifier:   9B:33:55:15:36:7D:58:8C:CA:B3:DE:C4:03:30:1D:23:B5:E9:46:86
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer:       /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial:       01962F3DC6BFA693FEC3C9C4BAF05D0ACFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number:          0CAB
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
                          2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
                          3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: Ijvw+EOs3a4uSJPrI4m71gexgE9iBiG7AaeQEUr8do4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:bf:a6:93:fe:c3:c9:c4:ba:f0:5d:0a:cf:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=9b335515367d588ccab3dec403301d23b5e94686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:10:75:f8:2b:d5:04:20:7d:08:45:73:57:
                    36:5e:e0:db:d6:1e:e4:56:43:7d:3b:0a:02:9e:2c:
                    d7:9a:5a:66:02:c0:22:87:ab:f0:ff:f9:73:d1:c0:
                    57:2e:f0:1e:b7:bc:e3:68:4e:5a:7a:45:c2:d9:ac:
                    08:04:19:7b:72:e0:ed:cb:64:32:ff:09:51:75:6f:
                    ed:2e:e9:ae:92:03:24:da:46:b1:0f:c9:7c:7a:e5:
                    91:2f:70:a1:26:db:2a:71:2a:53:f2:44:01:55:c6:
                    fc:cf:9e:f8:88:4b:4b:95:e9:ea:72:a1:ed:c5:34:
                    94:ba:12:92:c6:6d:fc:a3:9b:88:ca:b3:da:7c:d4:
                    b8:be:92:0a:a9:2e:9f:cb:ea:55:bb:78:0f:03:8f:
                    da:22:fe:8a:63:2a:4c:2c:6d:3f:5f:0f:ce:ef:f5:
                    dd:bb:69:c6:b9:1c:ff:55:a8:ac:a2:d8:9b:a1:59:
                    2a:c6:79:e9:96:fc:cd:84:9a:2e:38:ef:d7:6d:1c:
                    b6:e1:41:e3:a0:c5:a8:36:ec:c7:92:0a:a1:3a:1c:
                    d0:6f:2b:fa:81:7c:b2:ad:c9:b3:76:22:67:25:97:
                    9b:86:78:fa:e8:ec:a5:71:6d:32:62:f5:66:5f:73:
                    44:6f:2c:50:18:1b:38:2e:b9:66:50:4b:70:f3:63:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:55:15:36:7D:58:8C:CA:B3:DE:C4:03:30:1D:23:B5:E9:46:86
            X509v3 Authority Key Identifier:
                keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:32:2e:cb:a5:ba:e8:54:0a:34:b4:3a:cd:8a:e8:f3:3d:f9:
         d4:9f:51:20:09:63:d3:11:32:63:70:bb:e5:2f:b4:af:d8:20:
         aa:d2:dd:90:e0:e1:e1:1f:8a:b7:5c:8b:87:1e:d9:5a:f8:f5:
         d1:3e:f9:42:4d:27:95:a8:bc:80:e9:c1:dd:72:91:e4:2e:1c:
         99:d3:8e:54:2a:06:30:8b:f5:80:93:ad:00:8d:1f:55:5f:44:
         e5:de:71:a8:84:18:61:10:34:8b:a9:4f:61:91:a9:06:a0:be:
         3d:b3:09:b0:d2:5d:77:df:7d:ea:e2:29:3b:f4:05:55:54:f7:
         77:11:5e:d2:6d:fc:4f:38:4e:89:ab:b4:8b:67:d1:0d:4b:8f:
         e9:a2:28:3e:b2:2f:12:ad:48:56:eb:d3:40:d4:9f:e1:08:86:
         fb:90:4b:7e:07:5c:ea:9c:d8:21:7c:fe:c8:24:99:3e:65:65:
         22:75:86:a3:bb:7b:09:17:f0:d6:09:54:a6:18:33:93:6b:90:
         86:11:a2:c3:70:6b:20:92:a3:02:b6:25:4e:f2:ad:07:ef:13:
         54:9d:10:2a:ab:0b:e0:34:82:27:cd:b6:d4:e8:00:1b:23:6e:
         20:c0:0b:4a:a1:fb:33:73:87:a0:91:9c:11:e1:03:b1:c3:9c:
         01:a6:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----