Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File:                     XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier:          9hstJfbOokw9wj2QprXYBHVogn0dN1nTD7SgvoP19Og=
Subject key identifier:   63:CD:6D:2E:F7:68:A7:3F:6B:8B:F2:32:80:90:9D:E0:37:34:48:F4
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer:       /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial:       01962FAB2B23912D685783B01B11EB4CF8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa (hash: L0pGWwbFutGyRI32rrNWdKvE3ZZY088xKR9lZle7SCg=)
                          2: Tz90Wvu7GQ9v16xjtv3fYSRjDy8.roa (hash: /VeLcpXw8PuMvzvcyJgx3jKW0zDlptf/ULhrAgfV2dQ=)
                          3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: QLNw/Ke1Q3bAkQqd3rjafCYY04EH6HZR928bQZzVRo8=)
                          4: jwOao49fuGzjzKpy4DVicXhqkq8.roa (hash: vTxxc3wFEPVm9vo1ixcSgxSo2myxU1VuH0FNYAoBops=)
                          5: pjWvLHgWJr8VfxqCyu_wjseZwrI.roa (hash: M+VetrzhMK4qS2ZDHlL6T1xkNC7G/F+gqzb3HNS9swc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:23:91:2d:68:57:83:b0:1b:11:eb:4c:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=63cd6d2ef768a73f6b8bf23280909de0373448f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:aa:56:73:13:d8:e9:12:2a:4e:d4:e2:eb:
                    af:f7:e7:b6:4e:28:44:02:b6:58:6c:4d:11:37:74:
                    13:e0:4e:e2:16:51:08:e0:3a:5a:4e:2d:ed:24:4d:
                    92:44:b4:a7:30:1a:c2:06:2f:96:2f:c9:55:52:ad:
                    f6:e1:94:c4:74:61:3f:ca:cc:00:e6:4b:11:ee:42:
                    1c:38:48:cd:88:9a:05:80:f1:3f:2a:dc:ac:22:5c:
                    4b:ec:91:16:48:76:bc:d6:57:99:7b:5d:db:ef:23:
                    73:4e:70:aa:1b:36:b0:82:fa:9b:a5:a3:9f:1a:c0:
                    ea:94:5b:42:92:5b:80:33:a4:ec:50:5b:b3:b9:86:
                    8f:6b:40:a5:4d:2c:96:a1:98:6d:bd:0d:2c:48:d4:
                    88:9f:5f:02:9f:f7:ff:d7:c7:cc:be:16:e8:1d:c4:
                    99:5a:af:0a:cc:e5:4c:95:e2:70:15:07:99:13:a5:
                    9a:87:81:33:43:9f:9d:29:81:9b:33:ea:51:8c:be:
                    33:36:f0:8a:7f:46:57:c1:63:ed:78:5a:89:73:94:
                    2a:16:28:78:51:b8:b3:e3:2a:91:70:a7:48:cf:4d:
                    24:65:f2:71:6a:c5:26:fc:83:68:bd:64:c2:fd:75:
                    ee:18:15:2c:bd:30:f8:e3:7f:01:a6:d2:88:70:6e:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:6D:2E:F7:68:A7:3F:6B:8B:F2:32:80:90:9D:E0:37:34:48:F4
            X509v3 Authority Key Identifier:
                keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:82:a5:59:e4:32:e5:6e:00:8e:5e:db:c3:1f:2d:27:6a:
         44:59:37:33:4a:26:8b:f4:be:50:d7:2d:aa:f0:87:7e:de:1f:
         1e:7f:77:81:86:10:0d:98:72:3b:5b:a3:a1:1c:0f:e7:ec:5a:
         b2:5a:6c:7e:3b:46:cb:40:af:61:ec:e6:68:fc:08:57:9a:f6:
         99:79:be:11:93:82:8c:cd:29:33:89:0f:96:7e:33:58:7d:2c:
         41:8d:90:2b:0a:d6:42:31:fe:e0:69:b3:b4:ae:74:3f:09:ed:
         4b:26:50:82:5f:5f:ba:f7:58:b5:e9:79:d4:17:0e:51:d4:c7:
         b9:ef:11:53:f5:c2:7a:4d:6f:c5:91:1a:d2:5b:01:0e:2b:45:
         e9:83:6a:46:b5:91:95:9a:73:ad:78:b9:92:ea:91:c6:50:bd:
         b3:73:40:33:5a:15:b3:cf:88:da:cd:5b:78:83:2d:82:93:19:
         cb:5f:29:81:80:f4:0e:6e:ba:22:ee:58:a0:09:4a:a6:11:7d:
         df:33:99:ed:64:d4:46:97:c2:fa:24:7e:98:3e:47:e2:07:d1:
         17:8d:02:c4:55:30:58:de:33:70:f0:03:74:95:4b:6e:7a:a5:
         87:c7:22:4b:cf:18:f5:2d:95:c0:c2:19:ce:64:4a:27:69:54:
         a5:fb:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----