Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          Ys0n3AwPchiVJK2U5NSODycSwb1hQpBIO7xyc/3TiCc=
Subject key identifier:   BF:6D:76:64:68:0B:5D:C6:D7:F9:EC:93:F4:D5:63:54:57:06:48:6C
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       01962E988850490E08178CCC98D12D272A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          1315
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: z0YmK3DBEJY51oDvtbZ3ulbvX2H2yQnyz5r7T7wC88Q=)
                          2: XqND0wzVKfotYYo_bAK0zCAmMH4.roa (hash: +F+ctZwnM5x7VbTPr/m6vshTxzt2jT9bJAwza0v8PjU=)
                          3: cbjd-F3gs5JTeJ8S-ecZX4S4OmY.roa (hash: 9KCJKJ0kO8IQUZscWXPdQnVpTYhh90n/ErAQhi58lVk=)
                          4: ePF2G46_q6lIZHLciG1d0F3TJyA.roa (hash: +hBkrg3N+yMBcM9Wkx3206o1J+L54AE7fajcYSN7E9E=)
                          5: ei-lhbSyA6LHM30pnoTc676sVOk.roa (hash: BJvZcqOLIL3sVAhna5EPTZoiTPtvfxYPfeKNrqGIDHA=)
                          6: uF3Ipp-IOmC2QxpujNdolHkmlLw.roa (hash: hlYEypQIjtWjQMSDZuN9bDWHcqbDbwOnFZm/mrxdTfU=)
                          7: vTpbvCLw317pUWZPp8_hDkh88VE.roa (hash: Xc88zcdf1KorCO6RA2gqcBm66DJNRYMneNP18O1Fg04=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:50:49:0e:08:17:8c:cc:98:d1:2d:27:2a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=bf6d7664680b5dc6d7f9ec93f4d563545706486c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:ce:69:cb:19:62:e6:b2:32:63:c3:27:29:
                    09:3f:e5:d3:93:a6:05:17:f0:4d:15:65:52:c4:0c:
                    2a:a0:10:71:9f:01:0a:2a:92:4e:c8:20:05:23:75:
                    8f:a6:c2:37:7a:e8:c6:a1:c7:34:c5:4c:12:28:91:
                    9f:d3:59:4c:41:5d:33:bc:e1:be:ec:ce:2a:f7:79:
                    28:94:cd:ea:06:65:21:c3:16:a7:0c:19:17:b1:3f:
                    c5:5b:f6:49:8f:cb:90:0e:35:e8:31:e6:99:07:ef:
                    8a:24:cd:a5:44:8f:cf:04:7c:2e:c9:b5:6f:da:ca:
                    fd:16:6f:9c:e8:8d:c2:2f:37:26:e4:7e:14:df:61:
                    bd:79:08:0e:71:9e:e9:85:86:ed:1c:3b:9e:87:e2:
                    4c:51:28:12:36:b5:d3:a4:b8:38:ca:8f:8e:37:59:
                    ba:19:5f:32:e0:ae:90:fa:2b:cb:9e:e5:03:26:18:
                    2a:fe:7d:86:01:f9:25:3e:80:db:d3:55:5c:2c:23:
                    4c:20:90:29:10:b9:9d:cb:47:01:28:1b:5e:51:ec:
                    23:da:be:57:bf:cd:20:09:c0:c2:16:fc:23:8a:46:
                    b2:6b:7f:fe:f1:72:22:e8:8f:33:6b:59:eb:c6:09:
                    6c:0b:58:4a:d3:5e:74:a3:a6:5f:1e:57:3f:b0:08:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:76:64:68:0B:5D:C6:D7:F9:EC:93:F4:D5:63:54:57:06:48:6C
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:a7:aa:bb:61:b6:ff:5a:08:31:5d:95:90:5e:c0:40:7e:
         92:c9:7a:06:65:10:04:7d:80:9a:b2:f2:27:b1:cd:cd:68:e6:
         7e:92:19:d6:af:52:ea:38:6f:e5:9c:f5:cd:d4:db:f7:58:4b:
         c2:18:44:e5:6a:62:19:1f:4e:03:c1:c2:22:db:70:ea:65:76:
         e7:3e:e4:2a:54:5b:3b:59:72:9c:22:5e:1a:f0:b5:19:32:66:
         2a:36:9b:88:43:e1:e8:6f:67:41:27:4c:75:cf:53:93:d6:70:
         5c:08:8b:6b:47:45:da:4a:11:9b:24:cf:2d:7c:45:e9:4c:a0:
         f9:bf:4d:61:8f:40:b4:02:e4:22:87:e7:63:6d:ad:38:52:6e:
         a9:aa:62:8f:4d:b1:36:ce:d0:ab:bd:44:61:eb:c5:f2:59:1f:
         d8:45:38:bb:ec:59:77:02:7f:a1:1e:25:b8:fb:dd:b6:96:3a:
         ec:16:da:b4:ce:97:28:a1:c1:1f:78:e6:71:da:8c:8b:18:e9:
         42:1b:db:f8:95:0f:e8:75:67:bb:af:36:eb:89:db:fe:19:55:
         00:3b:42:34:e4:15:73:3f:c2:31:c5:ef:48:52:ea:b8:e4:21:
         2b:f4:1f:b8:0f:3c:67:bf:9d:d9:05:a0:db:db:dd:46:9e:ed:
         38:44:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----