Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File:                     xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier:          bMfY/rte8rkmFw+Pmo0P9UvF5Vj5ndiBjqADpXIpZvo=
Subject key identifier:   73:2B:CA:4F:F3:2C:77:45:45:BD:65:0E:F0:AA:99:D3:F7:BF:21:6A
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer:       /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial:       01962F7461810055B975648EAA2AB75726FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number:          0B6C
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
                          2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: enW8bJx0u9AeQjmg4n5Yt34QPaT4VxRA1SijlUD7ap0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:61:81:00:55:b9:75:64:8e:aa:2a:b7:57:26:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=732bca4ff32c774545bd650ef0aa99d3f7bf216a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:f2:d7:ee:e6:c1:87:14:a2:a9:9b:3c:f2:
                    10:d1:24:38:4f:91:6a:4d:c8:f4:88:a0:18:40:bc:
                    86:c5:1b:e3:15:e6:5a:37:63:7b:84:1e:95:54:03:
                    83:c7:36:57:2e:9f:37:01:11:28:10:47:4c:80:1e:
                    9e:98:6f:d0:a1:f7:7d:60:0f:42:d2:ac:13:7d:34:
                    45:ce:c9:13:e0:0b:dc:60:99:8a:3b:6a:3f:16:fb:
                    af:00:67:14:47:83:0b:67:dc:ed:7a:b1:8c:c6:04:
                    ed:95:7f:4c:17:60:0f:53:da:3e:db:bd:59:9e:f2:
                    b4:07:3d:06:c3:17:5e:cf:31:c5:d8:52:6a:29:8a:
                    84:ab:70:11:9d:11:13:30:92:1d:c3:b1:bd:b2:93:
                    bc:db:f6:c8:b4:cb:f8:3b:41:c3:96:de:54:ac:f3:
                    34:fe:b5:c9:93:ee:d8:3b:01:2d:62:d8:df:ce:fc:
                    7e:9b:cc:09:d0:81:9c:cd:98:35:5b:57:40:9e:5e:
                    0b:fc:83:7b:90:18:6c:36:f8:c6:9f:66:9a:bf:53:
                    bc:47:f1:58:84:6e:bd:df:57:55:79:5c:81:8f:65:
                    84:1e:1d:24:51:62:7c:7a:dd:23:ef:90:54:3f:5a:
                    cd:ab:a0:a2:03:b6:e8:02:7d:38:59:43:51:36:a0:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:CA:4F:F3:2C:77:45:45:BD:65:0E:F0:AA:99:D3:F7:BF:21:6A
            X509v3 Authority Key Identifier:
                keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:73:62:b9:75:ef:d9:18:a5:d6:56:d7:81:21:47:b0:35:
         d4:15:20:c1:d1:40:e9:fd:b7:af:df:9e:c0:14:0d:3d:35:c5:
         7f:c9:eb:1d:c3:d7:eb:29:2b:b3:cf:37:25:4e:ec:3f:b2:ec:
         91:bb:24:68:a4:b0:6b:d0:f1:2d:6a:bb:b8:39:15:c8:2f:4b:
         a9:89:d0:37:7a:f4:dc:46:79:b1:2a:93:6a:52:66:9f:12:82:
         57:7a:06:76:ab:89:99:57:29:07:30:52:95:96:0a:ec:62:3d:
         87:3e:0f:68:23:01:12:74:a4:40:1c:d8:51:77:67:c3:13:46:
         1c:a5:be:2c:f7:81:be:24:cd:67:94:fc:57:94:7a:9d:00:3f:
         79:08:c3:a2:c1:7e:84:18:22:ae:3b:5b:e5:90:cc:eb:98:f4:
         0d:86:4a:db:f6:71:bd:e4:e4:1e:30:af:30:74:90:a9:fe:2a:
         4e:11:6e:21:b8:5f:cf:6b:ea:c0:19:47:b1:0d:5a:12:54:63:
         c7:ed:19:3c:35:aa:6e:70:ac:bb:ba:20:6f:a3:47:54:17:53:
         c6:d5:f1:75:45:35:49:ae:c8:8a:b4:77:c1:fe:47:ae:6a:ce:
         f6:22:ff:16:80:3d:1e:00:b3:fe:6c:70:44:d7:29:ca:5d:60:
         11:ec:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----