Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File:                     xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier:          SN2KX9ZRSx6Ez+Vwwm1Plk+g8BkTk2Njr7ZHcku9Uq0=
Subject key identifier:   AB:DB:15:8D:B2:F1:F9:E4:3E:8C:6B:6B:EC:45:5E:1C:DE:C1:58:1E
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer:       /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial:       01962FAB2B2F94CC8E48183A5E8F1F406CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number:          1442
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
                          2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: 2sRRFUTW7/ubEVOeN3WxYwjcsKLZk7cuVNhoqC6Yu8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:2f:94:cc:8e:48:18:3a:5e:8f:1f:40:6c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=abdb158db2f1f9e43e8c6b6bec455e1cdec1581e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:0b:e2:00:a1:c2:55:f0:05:63:7e:1c:1f:
                    60:91:16:be:59:6e:f1:5f:e9:73:1b:d0:0e:7e:bc:
                    ba:39:99:32:00:d7:e0:12:b9:6c:c5:e3:0c:db:97:
                    bc:95:42:95:da:51:cd:96:21:bc:67:c6:37:46:ba:
                    a7:c6:e1:96:1c:f8:74:d1:1c:0e:52:6d:89:50:bd:
                    96:48:ba:0f:04:61:81:f5:16:fe:36:b6:1c:07:d8:
                    6e:18:fc:2e:4d:d9:89:55:b5:df:dc:76:8e:18:c6:
                    14:8d:c9:96:85:eb:f8:40:0e:02:7e:46:79:3e:58:
                    e0:9a:9d:37:9a:58:9a:83:da:ff:9f:1c:44:e9:64:
                    35:c7:f0:e4:41:4e:3c:8e:d5:23:12:e8:d2:34:bb:
                    8e:ec:ce:18:78:e7:19:77:93:22:e0:68:bd:36:42:
                    b4:d1:28:f6:52:28:70:4d:55:e1:b1:b9:21:fe:63:
                    40:53:42:a8:48:8e:fb:bc:8d:38:ef:a8:00:25:da:
                    be:74:ee:d0:e7:40:5f:d6:bb:53:77:ad:12:27:2f:
                    53:db:85:aa:08:61:f3:34:f8:3d:cc:41:3a:be:72:
                    dc:3a:d1:ec:1a:4f:8f:af:05:47:36:0b:68:d2:56:
                    ff:70:de:c5:35:26:22:6e:3f:4d:de:39:bb:c5:2b:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:15:8D:B2:F1:F9:E4:3E:8C:6B:6B:EC:45:5E:1C:DE:C1:58:1E
            X509v3 Authority Key Identifier:
                keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:8c:12:86:1b:26:b4:51:2b:ff:90:cc:3e:7f:5e:2c:b9:
         08:70:95:59:47:da:aa:5d:d7:78:61:4f:97:2f:1f:48:86:b4:
         36:27:61:9a:88:76:53:6b:45:e3:46:4a:48:de:cf:94:89:82:
         e0:71:02:60:70:eb:92:80:bb:98:d5:f6:ed:01:d7:1c:53:7c:
         7d:7c:f6:e9:a6:76:cc:f1:1e:94:b6:eb:92:f1:5c:64:af:96:
         12:f9:28:86:26:7d:ff:d3:e7:a6:40:72:88:8d:cc:01:c7:9c:
         b6:67:98:51:46:a1:26:64:b0:46:cf:0a:42:0a:87:92:9e:6a:
         60:4d:2e:c1:1c:0c:c7:26:a2:57:e2:dc:e7:5a:ad:79:50:a0:
         37:10:a0:71:c3:1b:e7:e3:f4:e7:fd:a2:f9:a6:d6:06:a0:00:
         9e:78:5a:17:8d:80:22:61:e1:cb:b7:d9:6b:4b:06:68:41:7d:
         3c:29:ee:79:63:e7:0f:f3:62:fb:28:1b:1d:3a:a8:88:0d:8d:
         be:58:2f:01:03:8e:61:bf:36:86:da:e6:d7:96:04:55:42:f7:
         56:95:a3:28:0d:a9:de:a3:a0:4c:72:fc:8f:9e:71:52:bb:90:
         04:4b:37:37:72:66:33:0c:57:e4:d4:80:a4:c0:5f:66:ef:31:
         28:31:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----