Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File:                     XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier:          G1l5P+hu0W4yHmnP2hIiJ0Y2l9xN0612iYUNPhfQKPk=
Subject key identifier:   66:99:0A:DB:A9:53:51:07:C5:C8:A2:C2:16:8C:8A:4C:06:AB:36:43
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer:       /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial:       01962FAB6D637E1F4767AFA24D04C0D0CFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:25 +0000
Files and hashes:         1: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (hash: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=)
                          2: VcpLmnndha8Y-vfgXC2dpkPqHYo.roa (hash: LeB85j8HcdjYpxaE0+430+0+/Pe7eOGrdSERq3WAn0k=)
                          3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: M5JP3QZ2+PKYB4QxaspZcYse3B9B+1Um1hQQs8JWJB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6d:63:7e:1f:47:67:af:a2:4d:04:c0:d0:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
        Validity
            Not Before: Apr 13 15:01:25 2025 GMT
            Not After : Apr 14 15:01:25 2025 GMT
        Subject: CN=66990adba9535107c5c8a2c2168c8a4c06ab3643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:dc:3f:21:c5:df:f8:a8:87:64:d8:52:a1:
                    81:74:ad:a5:2f:b7:f8:79:d2:1f:0a:9b:4f:14:f6:
                    67:6e:8e:c2:a7:ce:d4:49:c6:39:51:b7:56:17:f3:
                    de:03:19:b3:a3:95:1e:6f:b1:cf:37:dc:3d:03:f6:
                    1a:7b:5e:2a:77:a3:f4:e5:34:78:2c:3e:8d:ee:42:
                    fc:01:e1:d5:da:79:66:61:36:2b:ea:72:22:9a:0f:
                    5f:fb:7d:95:2c:e1:db:8e:61:2f:08:60:d7:44:96:
                    23:64:20:81:c0:84:b5:77:99:63:a6:bb:76:2c:40:
                    8b:7c:f4:c5:e8:df:fb:f7:4e:55:5a:4d:b7:af:b9:
                    10:ab:1c:ce:0a:dd:23:41:5d:45:66:94:bf:65:35:
                    4b:16:30:28:54:0b:b5:27:2f:e5:42:31:a7:67:3d:
                    4c:3f:db:88:94:1a:af:19:a3:6b:fc:64:18:3c:bb:
                    76:94:84:57:7a:b0:f7:8d:32:89:3b:a0:2d:a4:af:
                    e9:c7:f1:92:a1:24:4d:96:12:78:cb:d3:af:02:79:
                    37:9c:2d:10:6e:b6:15:b1:34:5d:de:75:fc:7c:55:
                    17:d5:2c:8a:2d:17:02:33:7f:57:77:fa:a8:0c:43:
                    2b:06:01:58:a7:e6:4c:7a:db:87:0b:d5:82:b4:8b:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:0A:DB:A9:53:51:07:C5:C8:A2:C2:16:8C:8A:4C:06:AB:36:43
            X509v3 Authority Key Identifier:
                keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:89:50:b9:12:5d:dc:a9:0c:ab:81:c3:34:61:a6:f9:5c:a0:
         a9:23:a5:e4:7c:16:65:9f:26:c2:18:da:50:92:0e:d7:79:e4:
         d1:10:29:71:67:3f:1e:57:37:f7:8d:54:f3:e0:ff:15:5d:ee:
         9e:c8:67:0c:80:01:16:cb:cc:c6:af:fa:d4:37:b8:29:fa:93:
         d7:d3:9f:46:1b:8f:c3:f3:f0:61:13:a8:56:3b:ab:38:75:c2:
         a7:62:e8:a3:cf:02:fd:77:a6:8e:94:1e:53:22:05:96:68:7e:
         ef:e0:30:10:53:cb:60:84:5b:05:fa:37:61:30:ad:45:29:0c:
         36:0a:d5:c0:05:01:97:ee:ed:ec:ca:b6:0d:c5:f6:f8:63:35:
         09:2d:1d:20:be:ec:73:7d:d8:a0:9b:05:10:d3:46:b6:8d:39:
         52:81:d6:b1:ad:61:5c:a6:6e:90:b8:2c:85:11:f9:41:45:e2:
         8e:9e:63:d5:4a:89:e1:ea:cd:41:e0:63:e6:f5:85:66:30:49:
         6b:6e:bb:ef:67:73:ca:8a:92:19:af:77:c6:9e:ae:f5:c5:01:
         4f:41:2d:8b:50:31:c8:62:f1:b1:88:38:a1:5f:b8:1e:3f:e4:
         f4:f1:bb:b3:6c:bd:f5:11:20:16:e8:6b:8c:df:e0:86:b0:73:
         1e:7d:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----