Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File:                     XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier:          4y8UuZQpv2jWtHEjoZmI7p9AWnXFDVYFqcAdUUcQ2sA=
Subject key identifier:   0C:60:4A:E3:CC:E6:96:64:9B:80:6B:11:B7:A0:A8:1C:E9:B1:4E:47
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer:       /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial:       01962E988830678A9E389EBE437E4837EC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number:          13FC
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
                          2: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
                          3: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (hash: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=)
                          4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: 8z18ko8u5UDlNa4dtB6wEl59IwSeb64Wifs4XXpPfA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:30:67:8a:9e:38:9e:be:43:7e:48:37:ec:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=0c604ae3cce696649b806b11b7a0a81ce9b14e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:27:0d:e1:30:64:10:41:6e:de:19:46:a0:93:
                    24:af:23:87:73:08:cd:9f:ba:64:28:64:cd:4b:78:
                    a9:1c:6d:b9:45:e9:b3:4b:19:26:80:b2:1b:ee:e6:
                    89:ec:6c:73:e6:3a:e4:58:a9:12:b0:a3:fc:a8:a4:
                    cb:0c:fb:1c:58:f2:45:60:c0:ef:56:f3:0e:45:66:
                    2d:c7:2c:7f:fc:94:1a:f4:26:db:e2:08:23:69:94:
                    fc:4e:88:a0:90:5f:ab:6c:b4:c2:92:1a:43:78:f0:
                    92:72:45:6a:05:94:48:97:20:98:ef:10:38:9d:27:
                    eb:d8:b3:34:67:52:98:73:aa:c9:ae:0b:52:50:11:
                    79:64:31:b5:40:c3:5b:c3:23:9d:1b:fb:0a:cd:e9:
                    b1:4d:f3:4e:09:e9:a0:b9:d8:95:8f:f2:a6:9f:72:
                    ac:a0:a3:e4:14:eb:ed:1e:86:31:82:83:9d:a4:2f:
                    92:dc:62:4b:67:8b:52:d7:f2:ee:9f:18:d8:24:9b:
                    87:24:4e:49:21:d7:e9:46:59:6a:1e:3f:dd:84:c7:
                    6e:51:f4:45:24:64:c8:ea:20:4a:7b:2e:aa:d5:ca:
                    e4:f9:82:80:bc:f1:50:29:af:15:25:df:ef:85:eb:
                    f6:76:de:10:36:47:b1:95:68:4c:c9:00:76:e4:84:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:4A:E3:CC:E6:96:64:9B:80:6B:11:B7:A0:A8:1C:E9:B1:4E:47
            X509v3 Authority Key Identifier:
                keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:37:85:5b:d8:b0:0c:6c:54:8d:24:7e:d0:d0:47:a9:3a:
         19:bc:95:72:8f:dd:36:84:cf:42:5e:49:b4:69:99:fb:2d:d2:
         3e:fc:da:a2:24:f6:03:86:c4:d5:7c:83:29:bb:6e:21:54:1d:
         82:32:7b:2b:62:7c:89:13:52:f2:c7:31:38:fe:a2:06:18:5b:
         86:fc:10:60:51:17:ff:16:e9:bb:2f:71:93:52:de:b6:18:f8:
         26:73:5f:ab:f3:42:4f:cc:95:7d:df:be:69:3c:11:65:07:ef:
         24:0d:f5:dd:9a:29:51:cb:3e:fb:73:f4:40:e8:50:90:ec:a4:
         b3:ce:6a:88:3d:18:43:17:f8:5c:a0:07:d1:7b:3b:c1:39:5b:
         ef:34:8d:fc:35:6a:03:e7:64:28:4d:d4:fc:a2:dc:d2:1f:97:
         b1:5d:df:14:f8:61:bc:6c:38:b7:4e:c1:df:44:14:6a:c0:fc:
         98:33:79:33:4b:00:17:7e:75:e0:d0:87:f0:3b:20:d0:70:99:
         3b:79:d7:81:a4:ed:5c:f5:d2:a3:16:d8:31:43:3c:b9:51:07:
         b6:59:1d:6d:7e:4c:12:ea:8f:96:da:5f:2e:30:27:c0:cc:81:
         e6:29:4c:84:86:89:a8:15:05:30:e4:be:a4:d1:a6:cc:40:60:
         fa:db:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----