Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File:                     _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier:          imLXxV17oYPqv2QNyUPrx5vugRdRWUwgb0+pFSTaj5g=
Subject key identifier:   C9:49:73:AF:A8:F1:D4:98:DF:A0:64:04:B6:B2:98:7D:4D:EB:EC:25
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer:       /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial:       01962E61B34464018E66F99818A378962C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: IPVqTow4BPog0VgWrmL6j3UlRyc.roa (hash: yHocQSt6Dh1L30jflXp+Oc+mQ08tmbAfLa5FFYWt/64=)
                          2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: b+rYqXTtTHg+aStV8RBfUB+Pc2oqWZil4dBrtgMpooY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:44:64:01:8e:66:f9:98:18:a3:78:96:2c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=c94973afa8f1d498dfa06404b6b2987d4debec25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:f6:26:f0:34:5b:a9:fb:21:45:6f:fc:2b:
                    35:b9:0e:7c:a3:39:f6:57:42:dd:89:fb:3c:67:41:
                    53:5c:5d:5b:7c:3f:f7:ef:01:4e:40:3f:53:5b:21:
                    04:65:3d:cc:13:b8:af:26:90:8b:3a:0c:dd:02:dd:
                    c7:4d:4d:51:d2:39:96:99:82:0e:f1:bc:92:fb:f1:
                    bc:21:84:48:72:ea:88:3f:36:4a:92:c7:2e:40:9d:
                    23:25:ef:dc:39:75:a9:c3:4b:f9:da:06:e6:d8:19:
                    8c:c1:49:ca:7e:01:1b:82:de:68:7e:b6:40:33:78:
                    31:9b:18:4b:cd:78:4a:3e:0e:0d:54:99:ac:cf:49:
                    d9:a4:28:78:41:16:22:44:52:8d:f7:22:d6:ff:42:
                    17:52:45:cc:b6:b0:45:01:8d:8e:63:73:26:cf:d6:
                    49:d5:f9:42:23:8b:73:17:8c:1b:1c:2d:f1:94:a5:
                    72:b9:8d:30:d2:43:c6:9d:04:dd:b7:55:91:8f:eb:
                    54:22:31:76:41:90:43:66:8c:75:82:28:23:1d:3a:
                    0a:2b:83:e6:ac:20:e1:95:c9:99:2a:d5:ca:46:d2:
                    1f:72:70:fc:99:af:c4:a5:14:a1:20:9d:f1:d8:4a:
                    53:02:20:87:d6:ce:d1:fa:35:13:fa:56:e2:95:66:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:73:AF:A8:F1:D4:98:DF:A0:64:04:B6:B2:98:7D:4D:EB:EC:25
            X509v3 Authority Key Identifier:
                keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:24:df:69:cd:1d:26:87:44:75:01:d2:ed:c3:c2:89:6e:
         23:07:5f:18:b8:17:da:96:08:a0:81:06:0e:3e:4d:ab:0e:8a:
         71:bc:69:e1:83:aa:79:bf:67:0e:f3:b4:e0:44:f7:b0:e9:88:
         e7:ef:ff:5d:99:43:3e:af:9d:fe:03:60:7f:26:66:19:4e:28:
         be:38:88:3a:4f:3a:7d:c3:21:50:db:ca:bb:55:95:3f:6d:db:
         11:06:5f:53:97:ad:aa:f3:b9:22:32:c6:80:c2:05:f6:0a:58:
         0e:30:e1:a3:d8:86:36:fb:b8:8b:8f:1d:a8:35:99:ae:8d:29:
         f6:b1:e7:f6:69:1e:75:b5:01:b2:47:50:86:9f:fb:b3:dd:ea:
         9d:4f:c7:54:f6:a6:c4:80:c0:35:a4:95:31:a1:07:dc:a0:d7:
         ec:bb:57:a1:21:af:fe:48:62:a6:b4:d7:49:a7:41:56:61:38:
         a7:7c:dc:e0:fe:e9:f1:c6:ce:11:55:69:9f:d1:c0:7d:c0:6f:
         0d:29:be:86:2f:ba:07:c1:09:c0:7b:8a:be:9f:b5:27:8c:4e:
         dd:ac:e0:88:59:40:ca:3c:56:7a:33:4b:31:27:9a:22:99:10:
         19:2e:b8:69:5b:07:aa:ee:76:23:87:93:1b:bf:2b:e7:66:c4:
         f3:4c:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----