Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File:                     XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier:          /tqKNvL5fvCtWd2DylvWlmXV5yjITJFwOCE8yWSgrck=
Subject key identifier:   DB:A8:00:23:5F:15:28:DF:79:BC:68:C1:94:88:72:B4:70:2C:3A:3E
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer:       /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial:       01962E2B1778FBC496C4627F96C6B70FC115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
                          2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: /xnNI8Ulj6P6P3TKk0oN0KjRkNxffVI9/9zQr4Nm6Lw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:78:fb:c4:96:c4:62:7f:96:c6:b7:0f:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=dba800235f1528df79bc68c1948872b4702c3a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:17:d3:bc:18:0b:16:92:0d:8a:8c:6e:88:
                    6f:65:0e:5d:d5:fc:5a:b1:ab:f1:d4:cc:36:d1:2a:
                    03:a1:68:9b:40:98:a9:58:0b:13:23:f5:31:24:bc:
                    96:1b:29:cd:73:77:30:5c:84:48:d8:44:40:37:98:
                    bc:8d:c2:cc:ad:bd:29:b0:ca:6c:6e:7e:63:f0:a2:
                    83:33:82:72:c6:25:8a:cd:eb:5e:96:48:5e:61:57:
                    68:46:62:66:a7:7e:47:01:63:81:1e:2d:3f:38:54:
                    ce:6d:55:d2:1f:e9:c6:02:72:03:81:e8:5d:8e:28:
                    35:62:4b:91:42:0e:fb:41:2f:68:ed:ee:31:74:ca:
                    21:d4:6c:0a:b5:d3:5c:b2:fb:20:d5:53:20:ed:95:
                    d6:d2:55:e1:3b:fb:56:5c:ca:2d:c8:da:48:0b:0e:
                    f0:1b:34:bf:f0:25:68:1e:a4:d0:45:03:9f:5e:7e:
                    9c:80:4d:09:3d:08:82:63:42:97:ff:d5:f0:cd:b0:
                    8a:84:1d:88:1c:11:3a:ae:6f:17:cc:63:cb:dd:bc:
                    85:17:48:2e:03:f9:ae:b6:53:ff:84:08:03:9b:de:
                    40:6c:72:79:8e:59:12:1f:5d:17:bc:ab:b9:8c:ea:
                    fc:64:5f:5c:00:4f:86:5e:cc:6f:99:a1:11:ca:0c:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A8:00:23:5F:15:28:DF:79:BC:68:C1:94:88:72:B4:70:2C:3A:3E
            X509v3 Authority Key Identifier:
                keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fb:ba:6b:35:19:d8:88:0d:98:d6:75:6d:89:92:fc:6f:6f:
         96:ae:59:af:ae:4a:a4:13:11:93:5d:db:29:68:5a:a7:60:f3:
         1c:ef:80:53:26:77:a4:54:8e:a4:92:4b:3f:a5:5f:d4:1a:89:
         a1:ee:26:5d:bd:10:41:6c:9f:47:11:c7:14:66:4a:2d:23:e8:
         a9:31:97:39:fe:fe:46:70:30:31:2d:e4:58:3f:d1:29:a0:ee:
         ad:df:5a:c3:c4:38:79:99:86:44:63:1a:22:bd:8b:9a:3f:74:
         3e:63:94:54:42:92:74:f9:01:49:0c:8c:c4:fb:8c:67:83:19:
         76:1d:60:42:cf:7a:af:7d:c1:1c:53:b1:12:29:33:46:ed:d0:
         83:ac:b0:9a:2f:4f:93:f8:71:54:42:a9:6d:af:f2:e6:00:6c:
         0b:78:bf:b5:fc:33:b0:47:10:b0:87:b2:58:3d:c3:75:3b:30:
         43:73:bc:12:b5:15:91:14:f4:69:65:6b:68:6e:49:a3:9c:8a:
         33:f9:32:9a:7d:f4:5a:c7:77:4d:bb:fe:69:1d:d5:9f:10:18:
         0e:20:3b:47:de:e4:eb:b1:62:07:9b:3b:e2:dc:63:77:bf:45:
         17:44:bc:e0:60:05:a8:2f:36:d5:29:ba:c5:fa:5f:ba:cf:e7:
         eb:7d:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----