Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File:                     xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier:          BubXVaC0ltXl1KTGqc99U2pRFi2nBeIg/sR3o+LNsW4=
Subject key identifier:   06:8B:7C:88:58:3C:E4:D3:57:D3:A6:8A:DF:94:B7:9C:94:20:3F:B0
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer:       /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial:       01962F7419CA7F1DC89C3117C6FFC5C72894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 14:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:00:59 +0000
Files and hashes:         1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
                          2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: mZbKQ4FcSTWl2TNcGxwgXyUa+y/cAFZMy+xbNI1QbYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:19:ca:7f:1d:c8:9c:31:17:c6:ff:c5:c7:28:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
        Validity
            Not Before: Apr 13 14:00:59 2025 GMT
            Not After : Apr 14 14:00:59 2025 GMT
        Subject: CN=068b7c88583ce4d357d3a68adf94b79c94203fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:ff:9f:99:0a:12:ac:87:81:bc:9e:b7:04:
                    8b:d3:01:ba:1c:76:c5:c5:97:48:9b:97:ba:40:3c:
                    98:3d:d6:89:0c:2d:8b:e8:d2:56:91:51:f0:63:87:
                    23:83:2d:c6:4b:75:a3:3d:b1:8f:14:a0:01:f0:0d:
                    17:b4:e2:ec:3c:44:ef:fa:07:10:01:74:d1:10:f8:
                    41:00:fa:e3:3e:b3:63:9e:f9:9a:fb:31:d9:40:56:
                    ea:c0:71:60:01:85:b5:80:5c:32:5b:c6:f8:91:a8:
                    f6:34:d5:cc:44:b9:33:8a:ef:f2:1a:ad:da:1a:8e:
                    31:6b:16:55:26:6c:22:24:e1:c9:21:da:8a:2c:49:
                    5c:fc:72:e9:8d:ff:15:72:9e:80:6d:08:67:75:bc:
                    5d:36:c2:c2:81:1e:5b:c5:61:de:e8:12:d6:8b:56:
                    9f:96:9b:5c:93:77:b7:e5:ea:a7:47:b8:5b:87:ce:
                    f6:15:43:55:88:d0:d1:59:db:18:c3:ad:b5:5f:30:
                    b4:2b:dd:cd:d4:4c:5c:a5:f4:a1:b7:dc:17:ab:1b:
                    04:ac:42:2c:f8:67:4e:5b:e7:4a:22:f4:fd:03:46:
                    da:68:93:0b:08:5f:dd:bd:eb:94:73:54:17:6d:e2:
                    02:50:00:d5:bb:29:87:79:d7:5e:66:87:31:06:50:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:7C:88:58:3C:E4:D3:57:D3:A6:8A:DF:94:B7:9C:94:20:3F:B0
            X509v3 Authority Key Identifier:
                keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:6c:e5:25:8c:e7:fd:c2:14:a3:68:b0:c4:0b:7e:47:5c:
         a7:06:4f:6d:5f:a8:97:19:a7:39:14:d4:13:ee:6b:d7:b7:a7:
         ec:42:9c:c6:91:55:72:43:24:ba:c4:13:20:10:73:60:93:76:
         01:0f:6b:a7:71:79:fb:4d:be:90:ca:21:ca:cf:2e:7d:dc:c7:
         9e:36:f5:1b:cd:8e:37:dd:f6:06:95:49:ee:fa:7c:a7:d1:55:
         ad:92:19:bd:dd:08:ae:7e:3b:71:d9:31:43:72:93:32:6c:9e:
         74:dc:d1:ca:b5:6f:96:78:57:f2:09:67:79:7a:ba:e3:f1:db:
         43:83:81:61:9c:6f:0c:a1:34:d9:a0:c2:13:1b:ca:2e:c5:57:
         ea:c4:e8:9b:cb:b5:1e:cd:c1:69:f2:ef:25:68:9e:8c:60:85:
         53:20:4f:0e:b2:be:34:5d:3e:51:6e:15:0a:26:a8:53:be:1f:
         14:62:9d:23:53:d7:9d:50:fc:b6:19:49:71:d4:3d:c3:bb:35:
         7a:1d:14:73:b2:04:50:3d:ee:7e:a4:d0:81:72:08:3b:1b:2a:
         3f:3b:99:d6:3e:08:7f:16:fd:3b:b2:30:29:e6:83:0c:a4:16:
         69:93:5b:62:80:6e:a8:e7:30:b8:96:d6:92:43:63:16:b7:ee:
         57:0c:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----