Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File:                     XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier:          gPKexoz7BZUznGSb42LF9M2g9tpCadCbtR0ukhgx0Qo=
Subject key identifier:   B4:42:A8:32:B5:36:5A:36:1E:FD:A1:3A:A8:51:35:D4:AE:1A:CE:86
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer:       /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial:       01962E61AD244A6B540BFEEBD238218817CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: 8ICVCVAtjFBM6cnzBzuqR2R4qeJJ6Fn9PcznE0XEpwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ad:24:4a:6b:54:0b:fe:eb:d2:38:21:88:17:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=b442a832b5365a361efda13aa85135d4ae1ace86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:44:97:c4:4f:4a:9a:e2:82:a3:3a:f4:4c:
                    52:08:15:20:9c:1a:09:6e:c2:da:e3:71:f6:64:91:
                    8d:9c:58:bc:1d:c7:f3:33:26:3e:f3:b2:a2:93:37:
                    00:43:47:21:05:ee:86:d5:96:4e:15:fd:79:bf:c1:
                    5d:89:63:84:f3:0e:ac:06:e1:10:9c:3d:43:e6:a0:
                    9b:2f:d2:b9:ce:12:3d:0b:1a:19:f1:7d:71:8b:08:
                    d0:99:96:ee:4f:3c:6c:cc:79:a1:69:35:56:5e:ed:
                    dc:4d:a3:3e:40:27:e7:fe:32:a8:1b:cb:b2:48:a8:
                    2b:5b:9d:6f:02:67:b4:58:c8:de:d2:06:66:cc:c2:
                    d4:df:aa:58:03:e5:02:17:6d:8c:4d:5d:5d:b7:56:
                    35:c4:b6:d4:66:1f:f5:68:51:a2:13:f2:66:ad:36:
                    74:60:bc:e8:6e:9a:2f:26:f4:04:a5:9a:46:8f:9a:
                    2f:69:9f:7a:18:af:22:c0:3a:d2:0a:c4:b4:84:4c:
                    5b:d6:b7:7a:a7:03:48:49:8e:db:d1:d8:61:b3:af:
                    b5:c2:5c:db:9e:1c:73:5f:f9:f1:ad:9e:05:34:97:
                    e1:3d:2c:71:e0:40:3e:ea:7c:9e:33:63:60:cc:8e:
                    78:32:b4:22:d4:ac:cf:3a:80:f2:a8:aa:a8:27:64:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:A8:32:B5:36:5A:36:1E:FD:A1:3A:A8:51:35:D4:AE:1A:CE:86
            X509v3 Authority Key Identifier:
                keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:26:f0:72:0e:a5:32:21:c2:32:9e:8d:ca:86:75:20:2a:ec:
         96:aa:67:1f:92:7a:1e:90:58:e7:11:87:59:4e:3d:0d:dc:34:
         6f:f2:f6:ae:21:72:b9:7d:eb:56:5a:b0:88:2e:a1:4b:45:88:
         06:65:9e:ca:c5:69:32:d3:c5:5b:dd:f8:e7:f2:37:a6:4b:ac:
         53:ac:7a:03:f7:5d:8e:f4:07:d1:4a:b5:82:4b:7f:af:ac:d1:
         46:ef:c2:b6:11:fb:15:13:a0:ae:aa:0f:d8:7b:d7:99:08:3c:
         67:27:22:53:f2:37:24:8e:86:4e:ea:2a:1c:eb:14:49:09:f7:
         c1:4b:6b:b0:cb:d9:13:d4:45:ca:fa:14:3f:f2:fc:f5:dd:79:
         7b:0f:a5:81:f4:37:9e:17:b5:24:42:a2:78:78:a0:6e:d3:92:
         66:d4:57:09:23:76:20:c1:2b:c8:32:fa:6b:07:89:65:6c:58:
         3b:bc:9d:23:03:75:76:01:3c:98:18:52:c5:3e:fa:0e:85:4b:
         d3:8f:75:d5:26:1b:90:e0:9b:d8:2f:8c:a2:79:8b:bd:93:e6:
         59:93:da:c5:be:b9:65:6e:87:3a:4b:72:5d:02:ac:6a:46:81:
         1b:d2:f4:a3:44:6e:7a:1a:eb:8b:01:34:dd:a2:7d:e6:e1:96:
         5f:8f:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----