Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
File:                     XHkaG6CbnU01jvBare1_DoXogbY.mft (raw, json)
Hash identifier:          Qtr9QDQm8bJirdegChDBT6RNm30ZO1LCoGLKsEX30wY=
Subject key identifier:   78:1F:51:9F:E8:9A:AC:74:FE:2C:C3:84:14:07:A3:AD:BE:5C:09:DD
Authority key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
Certificate issuer:       /CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Certificate serial:       01962E2B0942490B065052DC38C3DF79DCC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
Manifest number:          0A26
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: XHkaG6CbnU01jvBare1_DoXogbY.crl (hash: dJ4sNYUaQo106G+GKMA2dNzaRwaGj/jOouu+IZor7ug=)
                          2: _GYD1AJUDNposAkJpRDfG9xq6dk.roa (hash: afY5Qh0XccEeUiEofkFyRBQd+JnAG3mTgUzmW0se7YQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:42:49:0b:06:50:52:dc:38:c3:df:79:dc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=781f519fe89aac74fe2cc3841407a3adbe5c09dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:ff:a5:3f:e7:d2:fb:c7:22:80:cd:6a:92:
                    0f:66:6c:8c:cd:35:72:04:a1:40:98:4f:9c:e7:76:
                    57:95:1a:a6:eb:f0:ce:cd:65:9d:5a:69:ef:a7:62:
                    b6:3a:0b:cb:b8:7f:58:5f:44:5b:ca:6c:1d:70:be:
                    0c:6c:29:a8:06:75:b7:df:01:b3:ae:f0:35:a1:e6:
                    c0:a8:3f:9b:44:ae:2d:d8:79:cf:15:ad:6f:e9:90:
                    c2:0c:fe:bf:7d:bb:d5:b1:b1:5c:b6:16:27:a3:19:
                    9b:ff:7e:0c:db:df:3a:b2:b7:5c:ae:ae:c7:72:50:
                    1a:c5:b7:f7:2d:33:cd:63:a1:35:43:5d:74:e5:66:
                    47:e9:02:49:d0:05:9d:5c:9a:93:5f:47:3a:6d:31:
                    fb:d4:47:bf:02:30:25:98:ad:15:e6:2a:d3:a4:4d:
                    c7:9a:4d:26:2c:ce:d0:c1:d5:0c:0c:f2:73:ad:92:
                    23:dd:3f:1b:c3:4a:7d:93:d2:83:5c:13:7f:b3:c7:
                    11:3e:cf:d3:28:54:73:e2:1c:7d:0a:63:eb:fe:17:
                    aa:ba:9e:51:a0:41:6c:e8:5f:e6:f6:6e:6d:9b:c9:
                    f5:ac:37:a7:dc:3c:90:ea:a6:43:ec:2b:8d:82:8f:
                    2b:86:b1:af:36:ba:c8:ec:f8:b4:f6:9d:9e:3c:8b:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:51:9F:E8:9A:AC:74:FE:2C:C3:84:14:07:A3:AD:BE:5C:09:DD
            X509v3 Authority Key Identifier:
                keyid:5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ce:33:ad:26:f0:2e:a1:2f:8f:21:7c:65:c8:45:18:62:69:
         42:c7:fc:79:f0:ed:1b:8b:e5:ac:9b:d2:c3:c6:5e:8d:d7:2a:
         ab:5a:96:5f:93:5e:5e:68:ac:d2:31:20:3e:e0:a1:e1:d8:dd:
         15:8c:d3:21:6f:e3:d7:22:c0:3c:da:cb:21:9c:52:c5:23:19:
         8f:74:28:b3:a4:73:b4:69:81:e6:43:bf:51:55:21:34:1a:51:
         c2:39:df:14:32:be:aa:fb:14:3e:8b:54:c2:54:45:4a:7d:f6:
         0b:76:4f:66:3a:c4:9e:47:3a:c7:33:96:65:2f:f4:43:2f:a0:
         79:87:5e:86:74:ec:51:b8:0c:33:00:eb:42:d1:0d:6c:8b:cd:
         ef:51:60:b7:a2:46:db:67:e0:7d:c1:a4:24:a0:52:ad:36:80:
         b8:60:03:3c:c7:59:68:a7:e0:2c:07:9b:12:c3:89:cd:da:f0:
         47:e7:22:46:fc:93:3a:e8:20:ac:bb:40:b7:70:eb:ca:22:45:
         2c:0e:f0:77:ac:e2:9c:ad:59:6e:34:29:bc:6b:cb:be:97:69:
         6d:59:3b:39:79:16:59:fd:a4:e1:bb:aa:5a:f4:21:e2:2c:10:
         3c:32:cd:b6:a5:e4:a4:4a:8d:86:c2:85:b4:85:9f:2c:13:dc:
         bb:39:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----