Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File:                     XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier:          p7ZaAhIeYgJ4F0qkmFYpuLo8FRJPmUUmY1AQXs8+Kgc=
Subject key identifier:   25:BF:3D:C2:57:89:E2:39:B0:79:F9:C2:47:57:EB:99:58:62:EC:4D
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer:       /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial:       01962F065808B65E50B3BFC618ADCB0E31E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number:          0F43
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: +MW9rP8T8l8ovEriDzBEBHHSpWaPOf4bCRSOzKoCztw=)
                          2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:58:08:b6:5e:50:b3:bf:c6:18:ad:cb:0e:31:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=25bf3dc25789e239b079f9c24757eb995862ec4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:61:42:cb:85:e4:6b:b1:a0:fa:40:2e:4c:
                    1d:ba:5e:e4:ab:0f:8b:b5:43:43:61:10:c8:a0:04:
                    35:0f:ef:14:ab:fa:f3:64:9f:b4:bd:80:9d:32:54:
                    92:1f:f0:77:61:a7:d0:c3:ce:1b:55:42:77:01:88:
                    ee:3b:fc:4b:de:1b:ef:e1:1d:5d:ae:8f:6d:32:ec:
                    ce:53:49:29:db:6e:06:90:c2:f0:fd:1e:6e:c7:24:
                    76:df:cb:e2:b9:e4:dd:c8:93:46:d2:ec:27:65:33:
                    a4:81:7b:8e:5c:f8:0c:ef:4c:f3:f8:40:11:49:25:
                    fc:82:bb:cd:19:4a:6f:62:51:92:d6:ce:55:5a:46:
                    a7:08:a7:06:24:4a:c1:bd:6b:24:67:34:2f:d5:99:
                    aa:bc:e6:9a:26:14:43:c1:a8:1e:b5:ec:7f:3d:b3:
                    13:a7:64:81:d7:17:5d:ba:8e:2e:04:35:52:44:c6:
                    d8:ca:20:33:11:bb:ce:cd:c9:88:39:90:94:a9:eb:
                    33:6b:5d:34:3d:d5:c4:88:a9:33:5c:91:1b:fd:4e:
                    0c:16:7d:d0:dc:7d:55:cc:13:71:99:26:3c:5f:a9:
                    8c:bd:5a:1b:c4:13:47:63:44:40:cb:41:41:41:05:
                    f0:0e:53:17:0c:d2:5d:b1:71:4a:85:a7:f7:2f:ad:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:3D:C2:57:89:E2:39:B0:79:F9:C2:47:57:EB:99:58:62:EC:4D
            X509v3 Authority Key Identifier:
                keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:9b:54:82:a3:cf:01:fc:b6:23:bd:57:db:86:85:89:5a:
         6e:cc:10:e4:28:a8:86:bd:ad:4d:75:bf:a9:59:16:b8:69:38:
         3f:60:5a:28:4a:05:0b:68:da:e7:36:3c:18:83:81:ae:29:95:
         52:51:8a:3c:c8:7c:7f:d6:6b:d2:1b:db:20:40:17:1d:bb:02:
         02:23:0f:57:46:80:f1:cd:c1:a7:45:1c:23:d8:97:ce:94:ec:
         17:6e:a9:8a:b7:44:be:61:30:20:bf:b4:20:9f:82:b4:69:08:
         e1:b2:6c:44:05:5a:f2:e2:e6:0f:de:28:2c:2b:05:bd:9d:78:
         53:f2:32:b9:64:cb:ba:08:b8:ae:2e:af:ad:c8:ab:c6:41:3b:
         fe:75:fe:66:b9:f9:a0:91:84:ee:58:d4:a0:2e:ae:b1:4b:07:
         9d:d4:97:42:97:b4:47:a5:98:57:05:47:c0:22:fe:b8:03:19:
         3b:12:7b:c3:55:fe:4d:84:4e:40:89:f9:a2:a4:22:aa:fe:12:
         fd:7b:16:51:5f:7b:b6:85:46:d4:bc:8b:c3:7e:48:2c:97:ae:
         b9:97:c9:1f:49:f8:e3:8d:e0:40:0e:97:1c:60:db:0e:31:b9:
         a7:38:d4:44:89:42:e3:d4:b4:8d:73:44:33:e2:cd:29:2e:13:
         7c:ad:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----