Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
File:                     XL1s2RrWpyhrIfZQn92fUP7nXYc.mft (raw, json)
Hash identifier:          CiVO/FGB8FNa2taq8xel0qA2rROTm7X5d8rnGoZ4Byg=
Subject key identifier:   7F:FD:50:77:B2:30:9E:3A:3F:5D:EE:BB:76:AD:56:20:8E:BA:E9:F1
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Certificate issuer:       /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial:       01962E9960FFD50033561CA236FFE44492BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
Manifest number:          1417
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: LfsV7f6LxRRDF8DgEB39eI0JGcY.roa (hash: 57HPzdZv/cmkcVMLJmynj7OnbXGj1b4sWVjtj2VnRws=)
                          2: XL1s2RrWpyhrIfZQn92fUP7nXYc.crl (hash: L6iS0bG8CtrPsb53ueQf/m45n6nvQSksjUt5tJNrx60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:ff:d5:00:33:56:1c:a2:36:ff:e4:44:92:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=7ffd5077b2309e3a3f5deebb76ad56208ebae9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:e7:de:3c:21:98:51:ed:e2:d9:e7:94:e5:
                    f3:7b:f7:b8:e7:ef:35:90:32:23:10:52:ca:b2:fa:
                    73:0c:51:60:e3:dc:07:69:f6:ee:25:07:f0:58:0c:
                    2b:7d:11:66:24:22:1c:2c:e9:cf:d4:31:d7:fd:80:
                    3d:bb:eb:ba:e9:1b:56:e7:66:b7:84:0e:4e:8f:ae:
                    24:ca:a8:fd:86:9f:f6:e1:08:d6:2e:22:c3:d1:99:
                    d2:23:b2:66:86:85:8e:28:e1:bf:fa:73:41:43:6a:
                    e6:a6:fa:bc:de:22:15:ef:0e:ba:7d:f0:02:da:ce:
                    7e:4f:88:ed:29:9e:90:7b:53:c0:fd:bb:1e:26:6d:
                    9d:0c:7f:65:be:f3:fc:df:c9:73:3e:a0:98:bd:58:
                    55:85:bf:09:16:aa:8d:79:49:b2:ec:89:95:43:6c:
                    e5:89:48:61:f6:5b:67:65:bf:4c:72:0d:68:8d:eb:
                    e6:98:6c:ef:d7:07:31:57:f5:7b:80:49:64:31:84:
                    96:07:00:9d:76:61:ef:20:5f:f2:b9:e6:7a:25:30:
                    22:49:12:71:4a:87:fa:db:f3:39:95:b1:80:1f:47:
                    b2:c8:db:c2:ec:71:80:af:b4:1b:38:bd:e8:f6:fa:
                    d2:00:51:bd:f9:12:66:e4:7e:8c:0d:8c:38:c9:dc:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:50:77:B2:30:9E:3A:3F:5D:EE:BB:76:AD:56:20:8E:BA:E9:F1
            X509v3 Authority Key Identifier:
                keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8c:f6:e6:5f:26:78:7d:3f:81:d0:09:54:ab:1a:d6:a4:7e:
         e3:50:2d:1c:f6:9e:7e:3b:74:c4:59:83:e1:5b:d4:70:b6:65:
         1f:43:e9:23:0d:37:b8:53:88:b6:48:3f:76:78:31:a6:8c:04:
         2b:6d:b8:c7:56:d8:17:01:c6:e2:21:3c:b6:7b:f0:db:41:04:
         5a:1e:81:b9:07:ff:b7:5b:48:d8:3f:bb:2f:c2:a4:31:04:af:
         b6:5e:07:8c:12:f0:7a:92:65:5c:fb:0c:bb:22:d9:7c:50:a9:
         01:04:b9:74:f4:5b:c2:23:c8:5e:47:7a:6c:8b:fb:3d:4d:05:
         10:cc:12:a4:65:d2:8e:de:6e:38:6b:1b:43:c5:2e:a6:c4:a1:
         50:1b:17:80:57:4d:2c:49:44:0e:8b:1d:5b:2e:4c:d1:eb:4c:
         ea:eb:bb:f8:80:d2:f1:f4:36:dc:cf:36:c4:76:57:6c:60:b1:
         97:46:bd:24:15:5c:f4:02:e4:97:b9:33:ed:4f:fb:95:a4:5d:
         4a:f6:c1:03:f3:27:01:3a:cc:1e:1f:5c:98:a8:47:5b:7d:ae:
         c3:9b:58:a6:8e:d4:bf:ff:88:80:78:c4:0f:40:fb:eb:c2:9d:
         49:94:bc:ae:07:23:16:a6:5d:77:90:34:0b:d2:e5:72:9e:09:
         1b:73:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----