Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File:                     xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier:          lqC3vX90uuJ80m5z4qOstO9msTfLSbnuol0qfBk3icA=
Subject key identifier:   3A:CC:39:EE:8D:24:77:C7:96:5E:C3:F9:F1:38:B2:D2:01:78:A0:42
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       01962F066BF945FDFF467057EA471EB0ED07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number:          0105
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
                          2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: 60aJkZk05ZZ9X6ocSpXtbx6N+lBjIU+rZ5UtgAWo8xU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6b:f9:45:fd:ff:46:70:57:ea:47:1e:b0:ed:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=3acc39ee8d2477c7965ec3f9f138b2d20178a042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:9f:0a:60:9c:81:f7:17:58:76:41:8a:75:
                    42:88:16:b6:2d:d7:38:08:f8:98:1f:cc:a6:8c:68:
                    0f:36:a6:d6:80:23:d7:eb:cb:b3:67:e7:c0:df:40:
                    7e:8a:83:72:72:24:e8:49:4b:c6:02:bc:36:6c:76:
                    a2:f8:89:8b:f9:42:49:76:95:a8:61:4a:ec:8f:fe:
                    9c:1a:11:07:1a:4d:77:a1:b9:75:2d:d2:8e:16:fa:
                    57:f6:ed:50:14:79:4d:b5:f3:b8:e5:e9:ed:0f:23:
                    ac:c2:b7:a3:a0:73:dc:84:34:dc:f4:7a:96:fb:b8:
                    53:de:ee:30:5f:d6:5b:0d:28:f5:55:3e:6c:cd:21:
                    b6:a9:d7:81:af:b6:3d:55:78:8a:f7:a7:0f:d6:03:
                    50:47:3a:32:3d:a4:74:98:92:5a:30:f1:08:ba:e0:
                    e5:06:dc:88:a9:2b:ca:cd:30:6c:f5:57:f1:c9:15:
                    06:c0:e7:92:5f:50:ca:00:e9:0e:90:19:ca:50:f1:
                    40:93:a8:a5:56:a4:30:90:29:d3:b5:4f:f9:62:4c:
                    4d:39:c6:2d:ab:ed:b9:d2:52:26:c3:b4:81:ee:8e:
                    2f:1f:4f:0e:d9:99:43:25:04:cf:66:9c:99:50:ef:
                    dd:63:0f:ca:35:54:2d:ce:0f:a7:64:c1:73:c1:a3:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CC:39:EE:8D:24:77:C7:96:5E:C3:F9:F1:38:B2:D2:01:78:A0:42
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:a1:d8:4b:63:4f:f6:dd:14:42:53:b1:47:d2:7f:78:52:
         4b:ef:88:d9:b4:9f:eb:9b:30:1f:bf:05:53:12:4b:6a:ff:b3:
         19:da:a3:31:d3:7b:d2:7b:c0:03:8a:18:21:94:22:eb:9c:55:
         09:94:b9:5c:b9:cd:98:39:a6:f9:07:dc:a4:6b:3c:02:2b:36:
         3f:0f:57:b3:e8:36:8b:1e:8c:15:63:c2:2f:9a:f0:2a:d9:5d:
         8e:11:69:7c:ff:d8:1f:d7:6d:10:ed:e1:63:8b:f5:e5:7e:a0:
         87:a1:27:9c:f0:5b:24:eb:cc:4f:0d:2a:4a:cb:2e:0e:64:92:
         87:1c:eb:df:03:26:c7:58:a9:94:d5:4c:49:1a:79:7d:7d:f2:
         cc:fb:86:de:9a:d7:3a:71:f1:6c:25:e8:a9:31:6b:5e:2f:4c:
         20:8f:4d:8d:ba:34:1e:87:b2:d2:27:40:c3:34:22:36:9d:94:
         d2:03:cf:6c:fc:ac:f8:85:d8:6c:d1:5c:90:c4:7b:ab:82:42:
         13:c4:a2:6b:c6:fa:54:2f:19:44:67:e7:b6:67:25:3b:2a:31:
         30:79:70:9b:45:f0:03:1b:79:6e:71:18:a1:6d:70:f3:9a:63:
         ea:1a:23:45:4b:4c:c2:96:09:4a:7a:f0:b4:61:0d:63:72:fe:
         c2:97:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----