Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File:                     Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier:          k4hTtVwuT1x0KKZdWCaMZysU/JCk2EQjt3ftMK2ACqc=
Subject key identifier:   53:4F:BD:BE:18:6D:43:33:DA:21:B1:94:7E:E8:70:5A:57:B5:13:D0
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer:       /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial:       01962F74B3B0CC80521D8FF302B9EEE94617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number:          0C9F
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: 5/cdtkq4cGh/FA+8DFI4Nf2kKCJlbC76dqxcHNiqOjg=)
                          2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b3:b0:cc:80:52:1d:8f:f3:02:b9:ee:e9:46:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=534fbdbe186d4333da21b1947ee8705a57b513d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:f6:da:8b:a8:db:ae:e5:ca:8d:a3:27:a9:
                    5e:58:90:e1:06:2b:8f:59:3a:1a:1e:2a:4a:64:34:
                    7d:04:43:85:a1:92:bb:7a:dc:ee:5c:9b:e5:cb:2d:
                    d7:ce:22:30:5b:55:a7:6b:00:65:a0:86:4e:73:1a:
                    48:90:d9:78:95:a3:a4:8b:b7:54:b8:1e:ba:6a:3b:
                    22:6a:cf:17:fb:ed:c3:bc:29:38:27:c9:13:d0:5a:
                    d6:2f:3f:d2:62:0c:39:f1:43:f4:3f:20:ec:49:18:
                    a2:a8:80:90:61:89:1e:aa:bc:08:f5:47:6a:7a:6a:
                    78:36:f4:84:57:14:1d:b8:c4:11:25:d6:9f:58:3e:
                    61:a2:49:12:41:ce:ee:ed:4c:76:49:70:17:b6:48:
                    e4:17:75:5a:bd:9e:c0:e1:ee:25:58:4a:19:d8:0e:
                    c8:c5:95:a6:76:cd:6d:88:a0:e2:54:43:4a:aa:ee:
                    73:83:e1:fd:c6:c7:b6:90:4c:27:30:de:22:89:4c:
                    9d:25:ca:34:c9:67:fe:5d:7d:0e:8e:17:10:b4:1b:
                    ea:93:05:96:e9:45:a5:8a:cd:52:cc:3b:3a:10:12:
                    f5:67:cb:7b:09:64:ad:44:e0:f2:6f:45:8b:23:f6:
                    c1:37:96:82:ed:94:b7:76:cd:1b:0e:00:76:f0:d4:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:BD:BE:18:6D:43:33:DA:21:B1:94:7E:E8:70:5A:57:B5:13:D0
            X509v3 Authority Key Identifier:
                keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:22:3c:11:b4:86:3f:f1:01:12:42:b7:cf:41:1a:b9:e2:
         eb:71:84:44:44:e7:13:20:dc:3e:81:39:b1:9a:c9:ae:cb:7a:
         cc:4f:10:05:23:ef:d0:95:99:9d:1e:5e:a3:e7:fa:4c:f4:14:
         d0:cf:25:6d:2c:7b:7d:ec:bb:1d:0e:5b:a5:6d:c3:1b:24:49:
         a4:9d:0f:59:16:1d:91:9a:e9:7e:14:74:2f:0f:f9:0c:2b:49:
         f1:7f:96:d0:db:b9:44:42:ff:42:6a:1b:64:48:f0:6b:6e:54:
         29:a3:99:de:36:8e:25:02:10:f3:f9:ae:92:93:23:54:8a:03:
         81:e5:f6:8b:4f:29:db:8b:0a:80:01:25:4c:c2:1c:e0:fc:fd:
         2b:2b:64:2b:01:c9:d9:ec:f1:b8:4a:ec:b4:ec:b5:42:24:a4:
         b9:d9:37:8d:e8:c5:da:43:a6:0c:b8:f5:01:c2:60:99:53:ea:
         53:f0:0f:7a:a1:d0:90:3d:70:29:f5:b7:c7:b5:b2:95:51:70:
         21:ae:2e:57:4c:80:ae:1e:60:f1:3a:d5:f0:24:b6:d5:d0:2f:
         fb:4e:85:3d:3c:35:39:09:05:84:41:5c:55:2c:cc:59:cf:b0:
         43:bf:4a:54:97:e1:cc:5c:8e:c4:c0:7f:1c:e8:39:82:24:49:
         e9:e6:10:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----