Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File:                     XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier:          LU/OJOiqE2nzlQOQPRLoMwTA1a5zYfO+M1skVAdLkuk=
Subject key identifier:   1E:60:D4:95:EB:50:3A:56:66:39:3B:2A:71:63:57:8C:A0:DE:1F:AC
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer:       /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial:       01962FAB39C61452FCB514860772C0BBD303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: WiSJk6qyFtjqFbPoaqvm4lhRK7Lgw7fpWAX/6xbyIxk=)
                          2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
                          3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:c6:14:52:fc:b5:14:86:07:72:c0:bb:d3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=1e60d495eb503a5666393b2a7163578ca0de1fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:7e:57:ae:62:23:fb:3a:77:c9:fd:a7:c3:
                    53:89:bc:69:7f:0e:87:ca:d0:10:ae:45:64:79:76:
                    d4:71:bb:b0:c8:6c:ee:ef:6d:99:82:d9:3e:80:95:
                    41:29:63:e6:db:b8:eb:b0:94:1b:f8:7a:3c:24:5d:
                    92:d8:3d:eb:a3:65:f9:c7:d6:f0:d9:17:c0:d7:45:
                    b0:e3:74:9c:fa:a8:e3:cf:a1:99:ac:17:eb:80:0d:
                    7a:1d:56:f8:97:b3:b1:81:b2:12:39:72:4c:ce:64:
                    7e:3c:d9:73:8e:8d:2b:c2:97:54:88:58:a3:11:1b:
                    70:0c:27:60:dc:72:b1:71:c3:9a:28:06:5f:82:85:
                    47:87:a1:15:18:e7:b5:fd:2c:3e:b5:7d:a3:6e:c9:
                    eb:b0:53:1d:05:1f:c4:cd:e4:da:83:64:8c:01:8d:
                    40:f2:dd:59:7e:6d:7c:a4:5d:2b:c1:80:6b:a1:d5:
                    18:88:66:20:a2:59:de:c0:08:ec:48:6f:c0:d1:dc:
                    a0:0a:9c:f0:aa:06:f9:e3:4c:a1:9c:a8:0d:c8:f2:
                    db:b7:3b:ef:fe:d0:d6:88:50:57:8d:13:d4:a5:a7:
                    5d:61:e7:28:a3:f1:25:ea:06:a5:71:9e:6f:bc:ec:
                    97:6d:2c:c1:c7:f3:b3:4a:7d:37:e1:be:44:a7:54:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:60:D4:95:EB:50:3A:56:66:39:3B:2A:71:63:57:8C:A0:DE:1F:AC
            X509v3 Authority Key Identifier:
                keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:3d:7d:db:19:45:ff:86:5b:ff:e3:85:fd:bf:98:49:30:3c:
         42:39:fd:c2:8f:0e:ce:d6:67:cd:74:72:20:1f:d8:95:93:d6:
         05:1c:20:ec:08:c8:20:d5:73:a8:f6:27:68:69:f3:95:f3:4a:
         0a:0c:eb:1f:b3:5f:d6:da:fe:12:cf:d1:1f:60:6d:cd:00:07:
         11:3b:d8:ac:98:44:29:f6:d8:30:8b:69:31:b7:82:49:50:21:
         37:8c:5a:00:74:9b:ea:cd:38:50:ce:16:4c:58:35:03:61:2c:
         68:40:05:ff:94:df:69:5e:39:7c:54:2b:ac:d3:88:1d:ca:28:
         a6:62:d2:1d:0c:3c:e0:28:f9:68:df:e2:a0:15:47:6c:42:24:
         82:09:b1:c5:96:6b:c2:7f:57:26:51:19:48:f4:35:09:b5:c3:
         e9:5e:cc:da:00:4a:ba:a7:16:ab:c8:53:b7:30:e7:90:45:fd:
         1b:90:20:b9:7f:c3:d2:ad:c8:b7:22:6f:9a:10:a3:88:05:17:
         85:50:19:12:15:4c:86:7c:64:0f:3d:fc:5c:5a:f2:13:2d:ed:
         0e:2f:bf:17:d3:b5:24:90:5e:18:7e:3a:72:a3:4e:e1:5b:9a:
         73:3a:c8:0c:7f:f3:a6:ed:ef:b7:9b:02:1e:ee:7f:99:3b:a6:
         a5:26:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----