Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File:                     XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier:          iYbfnDlnM00BNcXpYlpgFEPf+RUPGx85okmpLwOZKCo=
Subject key identifier:   0A:9F:5D:2F:98:E7:98:D9:47:45:3F:05:C2:CB:A0:70:20:25:F5:C9
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer:       /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial:       01962E61E9EA43200BACE8A6ED778B1C3179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number:          1429
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: EVOqXYbiEoySAc+B5mMVl7NPgXDwcso2GpHMuiM5OGU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:ea:43:20:0b:ac:e8:a6:ed:77:8b:1c:31:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=0a9f5d2f98e798d947453f05c2cba0702025f5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:f2:84:8b:15:20:fa:79:7c:d2:46:8b:f5:
                    64:b6:cf:5a:dc:05:41:ab:2e:63:16:f9:65:e0:07:
                    45:12:fd:1e:a2:a2:d3:73:e7:11:b5:29:11:94:21:
                    80:fa:3d:05:25:e6:ff:c9:a9:b4:73:b9:eb:93:02:
                    0a:84:9a:36:ec:86:d2:82:24:9a:41:5b:59:ef:a1:
                    fa:c3:d3:ac:1b:a6:da:ba:bc:11:c9:5c:ca:07:f8:
                    75:19:fb:e1:be:2f:35:a4:28:81:f2:41:cf:32:de:
                    5f:5a:1e:6d:13:b8:59:a6:6a:01:1c:3d:71:13:5e:
                    02:fe:e4:ed:2c:4a:1c:5f:e2:1f:58:ed:b0:5c:25:
                    56:ea:a7:5c:db:ce:fc:82:57:7c:61:68:fd:56:09:
                    d4:31:71:53:74:a2:af:77:ac:f7:2d:f6:08:85:73:
                    ea:cf:0c:f1:83:c3:ca:1f:d1:76:a0:78:1c:1f:07:
                    5a:ee:22:74:46:34:dd:c7:06:07:c7:14:ac:70:cd:
                    e0:fb:1b:d5:73:32:5f:d1:84:97:82:af:4a:8c:2d:
                    61:5d:00:9d:6d:c0:80:90:f8:02:f6:19:3d:12:6c:
                    b6:9e:9a:d2:e3:82:04:de:c1:bc:c7:ad:4a:79:99:
                    dd:58:64:6f:74:f6:c4:00:b0:2e:76:62:f4:cf:ed:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9F:5D:2F:98:E7:98:D9:47:45:3F:05:C2:CB:A0:70:20:25:F5:C9
            X509v3 Authority Key Identifier:
                keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:7c:6c:c7:08:5c:b7:eb:8f:28:51:bf:4d:34:ea:f1:f0:e3:
         01:e1:07:9f:e3:85:0f:74:bb:6d:1b:14:a9:b9:e4:a6:63:ea:
         51:e4:14:da:1e:69:66:8f:76:2c:d5:96:bc:e9:08:38:89:04:
         53:0d:93:81:14:c0:84:5b:7b:45:e8:d1:4d:88:0d:83:24:82:
         6b:b8:8d:58:b4:b3:a3:22:aa:b8:6a:4e:bb:1d:20:59:0e:91:
         3e:62:c9:ef:bd:a9:61:a7:e4:26:e7:c4:0e:3d:45:b8:de:05:
         6f:0a:8d:b9:d5:14:e7:6e:86:2f:e4:c1:36:4c:15:97:e3:69:
         29:c1:0e:d0:bf:9e:10:6b:a2:29:07:12:40:36:80:4a:07:59:
         d6:01:82:5e:25:f8:9a:8a:62:99:9b:bd:10:e1:a3:7d:74:e8:
         3c:b1:59:63:83:c5:9b:50:4b:76:e3:1d:f8:bd:7f:25:ce:8d:
         c6:1b:2a:dc:2d:9a:c0:a2:87:37:ef:0f:6d:dc:ed:1b:eb:cf:
         21:c9:81:77:62:4f:e7:d2:4c:82:0c:0c:ca:00:a5:ae:98:b5:
         0c:32:d7:db:aa:09:4c:08:19:2b:18:43:dd:59:99:cc:4a:34:
         c3:c1:0b:9c:35:1a:e9:04:df:1d:90:a5:d1:e2:ac:b4:17:0a:
         ae:74:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----