Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File:                     XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier:          kFppPryQ73ROf/yKig78+FtVKJWEdJCx5dPJozXZCwQ=
Subject key identifier:   6D:38:23:E4:8B:77:1E:A2:15:09:2E:BB:D4:BC:72:AE:ED:6C:9F:21
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer:       /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial:       01962E2AFA2017923CA2D0042DC1DC1BB9A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
                          2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
                          3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: ZlLps+xaQEp0dTO5IyBX8NQZP8ws5HdEIzidbPSkIQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:20:17:92:3c:a2:d0:04:2d:c1:dc:1b:b9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=6d3823e48b771ea215092ebbd4bc72aeed6c9f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:75:95:7c:49:1f:53:da:5b:dc:ec:11:85:
                    b8:a3:1a:72:d4:37:9c:41:f5:d7:93:26:37:93:75:
                    f6:3e:92:1c:56:85:da:5d:6b:d1:dd:71:f5:a3:fd:
                    8e:cb:9a:b0:b6:e9:e1:3a:56:b3:9b:9a:77:34:dd:
                    11:3b:a9:fc:04:93:d3:d1:7a:9c:bb:b3:1e:da:aa:
                    b7:50:33:cd:b4:9d:46:66:dc:d8:bc:79:55:6a:eb:
                    57:ac:d2:51:14:05:e5:62:68:27:af:98:90:72:9f:
                    41:17:13:a4:af:c8:1c:34:c1:8b:e1:fc:c4:7d:75:
                    f6:a8:b1:28:96:c0:36:bd:cc:0e:45:64:c0:1a:0b:
                    03:d0:c7:4c:4b:9d:30:9c:74:30:4b:e8:fa:57:24:
                    4f:e4:69:54:dd:93:93:69:53:8e:32:9f:0d:88:b9:
                    5c:ab:c9:5e:29:1c:91:69:12:07:53:4d:c2:10:aa:
                    53:a5:11:35:d5:1a:e8:ff:fd:f8:68:19:5e:97:9b:
                    72:02:16:f0:27:60:9b:49:18:93:8d:c6:c6:41:46:
                    40:36:f6:39:a5:a8:fd:52:0d:78:2c:95:24:5b:3e:
                    ca:ce:b4:bb:5a:3f:a1:34:1a:9f:15:3c:36:00:fb:
                    f6:01:24:24:fb:f2:b6:45:7f:d3:50:ef:9a:53:fc:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:23:E4:8B:77:1E:A2:15:09:2E:BB:D4:BC:72:AE:ED:6C:9F:21
            X509v3 Authority Key Identifier:
                keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:a2:6c:f5:9a:52:f7:44:df:e3:25:4b:be:51:5d:65:b7:
         bc:34:ac:cc:a3:89:39:e9:f2:39:87:47:44:6f:38:0f:9d:6a:
         cd:4a:29:61:e3:7d:d5:36:0d:a9:a1:fd:84:28:21:21:95:31:
         9b:d2:e4:ce:b3:6b:40:f1:bd:58:3a:46:b0:46:e6:6c:70:c2:
         3a:96:2b:25:14:32:19:96:6c:13:d4:03:21:dd:7b:e4:cf:88:
         be:5a:fa:2d:d1:5a:bb:07:9c:0e:e1:f2:c3:80:99:3e:42:9d:
         57:ad:50:9a:74:f8:f2:87:aa:9a:86:e4:1a:8d:c2:ee:12:05:
         51:94:ae:07:fd:23:fc:29:c0:99:8e:62:b9:82:b4:7b:af:ad:
         1d:23:0f:6c:6c:f4:8e:bc:2d:2c:85:0c:e2:2d:bf:d5:fd:f9:
         9d:59:3c:b4:51:24:62:c5:bd:26:99:2e:13:95:aa:3a:5a:96:
         bb:bc:8f:25:94:52:3b:a2:e4:d3:95:80:91:6f:98:75:ae:8a:
         57:fe:19:74:c8:17:f2:31:fb:ad:19:84:08:ce:4c:2f:7c:1c:
         36:fa:a7:d7:fc:a7:de:16:e3:67:e2:e1:22:8d:79:fe:8b:4e:
         67:c3:3d:ed:00:02:34:66:7c:09:6c:8d:ca:c4:b1:26:7c:ad:
         d5:a9:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----