Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
File:                     XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json)
Hash identifier:          pNazudkqlYf6FNBjkbcBol8718fZiFfW9EY4l6ZYu3k=
Subject key identifier:   50:A5:BC:6B:83:58:5B:BE:E1:4D:F6:1F:BE:0C:66:B3:49:EC:2C:3C
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Certificate issuer:       /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial:       01962FAB6484A1FB9C4797D31D0CB338F289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=)
                          2: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=)
                          3: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=)
                          4: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: 7NXjH/0IBc4Qnk7jHpGS4ZEORiOpDrOckoV2YeDxes0=)
                          5: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=)
                          6: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=)
                          7: eGwOE8lbraIFP9l-UBBCUyjN8_w.roa (hash: E3bGB9caMn035nPuIHCWLooaKqDnHxrQ+ZG/yfDBfXc=)
                          8: obqfL4R2IKMApxxeeUPFE0sW9OQ.roa (hash: 7Ovq+/kB1PpmG+7SGcAWS7Jl70fuixev1vRb1jw0DXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:84:a1:fb:9c:47:97:d3:1d:0c:b3:38:f2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=50a5bc6b83585bbee14df61fbe0c66b349ec2c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:ba:3e:49:2e:f1:6d:df:15:ee:3a:a5:83:
                    0b:96:a1:36:8a:6b:75:c5:02:dd:bf:b1:64:ce:5f:
                    60:47:a6:a2:7a:00:1b:54:24:a3:45:6f:0b:1c:30:
                    c4:d9:f5:d8:90:4c:af:79:80:00:4b:3d:a4:af:25:
                    58:37:47:25:9d:a1:e0:e3:c2:21:55:5b:e6:af:7e:
                    18:64:40:7a:f4:ac:f0:11:cc:36:d6:9c:ba:be:e5:
                    1b:13:18:cd:33:18:f7:c4:49:b1:21:6a:9b:75:d0:
                    3d:f9:ad:9c:00:1a:57:c3:e1:7e:ac:5d:34:f0:29:
                    78:b6:5c:62:29:71:58:72:34:9e:de:98:79:d6:be:
                    18:d4:d3:00:96:16:a9:ae:8a:b0:1f:ef:7c:03:52:
                    a9:79:f7:ee:1a:0f:42:9c:c3:e8:3e:01:3a:e2:4a:
                    9a:eb:44:75:de:7d:db:a3:bf:39:44:7b:65:f5:7b:
                    a1:e2:8a:f0:12:ab:c2:63:53:73:b7:6b:ba:ad:3e:
                    d8:db:ca:96:6d:62:4b:87:4b:b1:98:66:1b:e5:95:
                    1c:12:be:61:29:a2:52:a3:fe:58:d6:d7:96:33:ca:
                    14:ce:51:cd:03:cb:29:48:92:62:d4:70:e9:2d:05:
                    7c:c4:9d:56:ba:df:cc:25:13:c0:e3:9e:a9:03:a8:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A5:BC:6B:83:58:5B:BE:E1:4D:F6:1F:BE:0C:66:B3:49:EC:2C:3C
            X509v3 Authority Key Identifier:
                keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:0b:7e:cb:6f:97:f7:0c:f1:37:df:d6:11:01:a8:a0:22:
         58:fe:0d:51:07:aa:cf:fd:8d:dd:e8:f5:76:9c:d2:6f:04:54:
         3c:f3:79:63:13:6a:27:8e:74:f4:ed:64:22:63:1d:71:47:b2:
         dc:e1:a2:ff:5a:bd:65:32:92:ad:34:d3:34:4d:83:7e:6d:35:
         4d:b3:f4:60:23:78:34:1a:cc:7c:0a:64:58:fb:ca:df:f2:36:
         5a:4f:9e:a1:50:c4:27:0b:47:e3:1c:9e:bd:74:9c:99:12:f0:
         fd:c1:63:c5:41:33:d8:59:ed:35:07:5e:84:b2:eb:2e:17:22:
         f8:5c:a7:3a:03:c4:e3:fd:35:e4:96:8e:ba:01:45:f0:15:d6:
         74:08:c3:44:cf:60:65:ef:56:ef:04:42:7d:db:1a:d1:df:d1:
         3e:80:28:53:e6:eb:9c:70:34:98:2d:a5:8b:cf:ac:61:6f:59:
         5e:86:e3:a0:0a:0e:bc:ac:a9:4d:8e:9a:8b:79:13:0c:99:ec:
         a6:b4:e1:61:c8:6a:7c:12:df:d7:c1:c1:30:f9:09:6a:67:9f:
         78:ea:a3:4b:12:cf:90:6c:bc:21:f1:95:48:2e:ef:3f:a7:f4:
         24:a7:f8:74:21:76:4e:de:26:7a:f3:af:e8:ff:31:93:54:c6:
         0e:8f:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----