Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          ts1G0w+zHWYX7UZ9FCnJBp1bjVaEempxK0z7rsQyeZQ=
Subject key identifier:   9E:7F:87:6B:5C:B0:71:7E:E3:CE:77:89:88:59:95:F9:EA:A1:71:79
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       01962DF4427BED9B51BA1B918696C6B70D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          0E61
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
                          2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
                          3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
                          4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: t8GwHq1zX/tCkc+wvAe8mxH7X8oAQmiCrUW1LcuNPWE=)
                          5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:42:7b:ed:9b:51:ba:1b:91:86:96:c6:b7:0d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=9e7f876b5cb0717ee3ce7789885995f9eaa17179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:9d:96:2a:73:ce:9c:7f:fc:56:d7:e2:43:
                    d3:c2:4b:20:9e:44:df:8e:87:44:3a:7b:b1:00:57:
                    c9:d6:2c:6b:f8:ae:b8:ac:a1:f4:8b:87:0a:90:46:
                    ac:48:35:24:46:1f:f6:cc:7a:93:2c:a1:db:cc:a6:
                    a4:14:1b:3b:ea:7a:45:17:79:e2:e0:33:aa:82:12:
                    36:c9:de:97:86:46:ea:a6:5f:22:40:91:88:d3:c8:
                    5f:28:28:13:c7:06:a9:df:a3:87:f8:7c:32:1c:44:
                    f5:5f:55:76:7e:49:86:d5:6c:0f:58:00:8f:bb:f4:
                    03:c4:37:2b:8a:4a:bc:bf:16:47:6d:5e:e2:82:0a:
                    a6:93:02:30:16:59:bd:9e:e6:17:35:d3:a5:99:a5:
                    dc:ba:01:d3:4f:f4:16:5d:6e:c1:6b:a4:8c:0f:0c:
                    e0:33:94:3e:77:d2:e5:28:d7:be:8b:dc:70:cf:27:
                    c5:d4:98:c5:0f:35:06:d7:4d:30:4e:c7:97:3f:a8:
                    5a:17:71:2a:06:5c:08:f5:c9:aa:31:df:54:ad:70:
                    3d:78:db:28:c7:2b:8c:7b:34:e2:1e:70:83:5f:4c:
                    76:db:db:a3:03:62:57:ce:af:8f:8c:fd:34:c9:44:
                    97:7b:d1:a1:6f:83:db:ec:5a:10:40:aa:73:a4:7c:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:87:6B:5C:B0:71:7E:E3:CE:77:89:88:59:95:F9:EA:A1:71:79
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:b7:b3:00:aa:60:8a:97:97:db:04:23:b4:b6:39:86:c6:7f:
         c8:ad:67:83:5c:85:8c:5b:61:08:a3:d0:d8:3c:22:ad:c0:c8:
         27:96:0e:2e:cb:9d:e7:55:de:32:c7:1f:c5:d1:cc:43:42:8b:
         95:f5:5c:cc:6c:42:8a:69:49:d8:3b:7d:e6:55:19:d7:67:12:
         ae:10:f1:4e:fd:36:bb:5c:e2:fa:b5:1d:6f:3d:20:14:de:79:
         f6:4d:2b:29:b0:3d:fb:2b:03:d0:d2:1a:6d:5a:80:0d:c1:49:
         c1:d3:03:fb:ce:2e:73:54:0e:24:f2:81:35:72:b1:ec:4b:3e:
         db:c6:c7:dd:89:bf:06:48:31:d0:a0:7a:96:37:e9:d8:3a:0a:
         98:dc:33:90:d2:dd:28:9f:a3:ec:fd:0e:55:c2:68:eb:cb:b5:
         57:3e:80:1e:93:2d:3c:f8:76:be:5a:41:7b:07:ab:e2:b3:00:
         c8:fd:6d:f4:d6:9b:26:49:3e:a5:5f:21:ee:48:1b:5a:ff:5b:
         e3:17:fc:30:b5:3f:95:b3:12:4e:b2:59:3e:14:d2:64:b0:15:
         b5:5c:27:6c:f9:f7:02:b8:8e:d1:97:17:d3:88:75:7a:48:98:
         9d:09:df:19:d7:f4:66:12:81:1c:37:09:42:a5:39:88:70:08:
         95:f5:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----