Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File:                     XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier:          WuF2ltpd1Au8ZfHLQxNYQZT6v1PTp6is2jWtC8v0yPQ=
Subject key identifier:   E6:2F:30:B8:F7:8B:6A:56:92:24:CC:0C:50:BA:BC:12:A3:9F:6B:9B
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer:       /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial:       01962F0682A76BF5F2AF6C425917846A9433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number:          03AB
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: f6vWTv7dGNOLKQTMWti3gDAiC5lFYsThGSf0CfRmjCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:a7:6b:f5:f2:af:6c:42:59:17:84:6a:94:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=e62f30b8f78b6a569224cc0c50babc12a39f6b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:6b:50:f8:f0:8d:1b:3a:fd:e7:48:ad:84:
                    d7:a9:c7:45:ca:8b:72:30:b9:68:0c:73:00:5b:56:
                    b0:da:ad:9d:d2:39:30:fd:6c:db:4a:66:7b:1c:13:
                    fc:76:46:b5:b8:03:5b:d9:97:50:62:0e:7e:e0:54:
                    33:c6:0e:93:e4:98:92:0f:c8:09:d7:d5:53:6f:70:
                    dc:0c:36:46:92:5e:a9:e0:7a:1f:79:c7:db:9e:2f:
                    a4:d8:15:07:68:7d:cf:56:48:c3:ab:d6:59:8f:bb:
                    30:b3:37:b9:fb:d7:48:00:c6:4a:4f:bc:2a:c2:ef:
                    ef:2f:da:df:83:5b:c5:b1:ef:eb:84:f5:42:16:93:
                    2c:18:f6:4a:c1:8b:9a:d3:1f:51:c6:25:90:ab:e6:
                    6a:d9:c5:1b:64:b9:76:19:47:b3:c7:12:73:ca:07:
                    fb:03:32:eb:55:ec:84:3c:fe:1f:4a:b0:5c:d1:84:
                    68:90:4a:ec:bb:ca:0c:87:77:34:30:3a:40:f8:32:
                    e2:a4:0b:03:c8:6b:44:a2:c8:f6:d0:e8:1f:3d:c6:
                    aa:b5:7c:8c:44:d5:a1:92:a1:5d:50:cb:90:f4:35:
                    b9:19:a3:af:59:e4:11:76:5a:10:f0:34:9b:12:dc:
                    82:67:2a:6f:52:8e:cb:53:1d:5a:74:d6:56:f4:0c:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:30:B8:F7:8B:6A:56:92:24:CC:0C:50:BA:BC:12:A3:9F:6B:9B
            X509v3 Authority Key Identifier:
                keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:98:48:9d:2e:96:64:43:07:be:8a:83:a7:89:6a:3b:d0:3a:
         62:5b:69:cd:70:8e:7d:98:b6:79:68:76:0a:4d:70:52:8c:72:
         08:22:9e:03:da:8a:fe:af:d5:7c:f2:18:1d:30:ac:90:e1:ea:
         ca:8a:ed:88:4e:92:6e:65:60:2d:92:f8:a0:16:dd:c9:1f:c5:
         3b:77:ce:a6:c0:20:f7:e7:57:76:3d:ab:08:ce:3c:cf:5e:bf:
         59:78:29:99:ab:66:75:c7:d1:6d:98:b0:9c:1e:fa:62:f2:2e:
         59:67:09:01:3c:b9:a9:56:a4:e7:1e:f2:0d:1d:7f:b4:8c:ea:
         d2:2a:fe:68:9b:40:ac:27:fe:a0:50:a0:f8:dd:37:d8:6b:d0:
         37:a2:48:48:f3:03:41:05:5b:73:6b:78:65:86:fb:a2:8f:55:
         d7:70:cc:51:c9:6d:a6:8c:00:e4:c1:36:36:79:3f:41:89:be:
         f8:46:b0:e3:14:08:79:c0:5e:48:c9:c9:71:9e:5c:75:7d:08:
         84:59:87:d8:eb:f4:ab:82:fc:f0:81:ef:be:af:ea:02:56:db:
         dc:6f:8e:37:ba:5c:bc:a8:ba:7d:87:bb:8b:0b:26:69:21:79:
         ee:8e:c5:7d:bf:ca:f4:df:dd:56:8b:0f:ce:09:1a:33:96:01:
         5b:88:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----