Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File:                     xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier:          +934x53yCxg+ednTtbX7IO9W27Gz87OXpOp1rUbeHoU=
Subject key identifier:   6A:F5:24:19:4F:FC:AF:A1:26:B2:64:F1:B1:CA:CD:DE:18:D5:70:2F
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer:       /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial:       01962E98C111F00CFC6EFE192D4102167E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
                          2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
                          3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: 2lbR1NbCIhcPbFZ3wy0ExJ3SJI0N2LSP5Bx/n7CYTws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:11:f0:0c:fc:6e:fe:19:2d:41:02:16:7e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=6af524194ffcafa126b264f1b1cacdde18d5702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:a6:16:46:3e:bf:c3:32:7e:4b:50:30:04:
                    3f:e0:24:cc:2a:6d:69:76:99:e9:22:4e:e3:cb:37:
                    5a:d3:18:fe:29:10:93:5b:a3:3c:e5:0f:4c:89:28:
                    dc:02:81:d3:0d:04:88:81:2f:37:c7:6b:f2:8e:e2:
                    ca:61:c0:d2:e9:c9:af:f0:a5:df:ba:34:40:36:da:
                    36:3b:5d:15:ea:5b:64:5f:ee:fe:69:92:80:d5:4d:
                    9e:ee:a0:58:58:c2:46:d8:8f:ba:0f:6b:38:b2:5e:
                    20:9c:22:8f:56:9a:02:c8:5e:d3:6c:e8:d9:c5:79:
                    89:5c:65:95:38:de:c3:22:fe:b2:7b:be:0b:3a:68:
                    54:7e:84:c4:d2:71:71:01:cf:77:33:1f:2e:2f:af:
                    04:2c:9f:18:87:d3:39:39:74:ef:7f:d1:6a:2a:32:
                    1f:7e:cd:57:65:7f:b8:b9:7f:71:12:a6:d2:ab:11:
                    18:b2:7a:a2:ab:12:4a:8f:f4:ae:77:d0:96:f0:aa:
                    be:84:1d:2c:cb:ad:2e:7a:4c:5d:50:e9:d5:02:04:
                    c3:dd:33:e8:66:07:67:ea:3c:80:19:36:e9:e8:88:
                    83:bf:07:63:c3:f0:73:42:6d:3b:b5:6f:8c:01:1f:
                    f8:a1:56:af:17:ba:aa:2b:e7:82:75:e9:ae:e2:93:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F5:24:19:4F:FC:AF:A1:26:B2:64:F1:B1:CA:CD:DE:18:D5:70:2F
            X509v3 Authority Key Identifier:
                keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:93:04:ec:91:00:93:75:5e:fd:bc:a0:8d:7b:50:07:ec:b2:
         2d:86:4d:db:76:1d:f6:78:47:b5:b9:d2:38:66:9c:0c:21:2a:
         b1:7c:d7:25:db:e2:fb:62:46:16:25:cb:83:aa:26:d9:77:f8:
         c8:4c:d3:9a:4a:5c:91:09:07:06:fd:ed:a3:41:4e:69:c7:69:
         70:fa:60:0d:7c:4f:44:d7:6f:ec:b3:11:3f:ae:52:93:42:91:
         4c:33:d7:e6:61:86:05:c5:3c:74:e3:1d:6c:a6:6f:43:cc:d7:
         0c:d7:9f:22:f2:bf:53:94:19:c8:11:ed:28:a3:02:bd:5e:b8:
         ac:63:7b:5f:6a:ce:46:3a:c6:bb:91:cb:8c:3b:bc:18:da:9d:
         04:57:fb:88:cb:e8:51:50:48:4a:33:03:11:9f:6a:b7:12:a4:
         ec:e2:89:6a:a6:65:30:52:1d:16:db:65:08:35:07:a2:c7:1e:
         4a:41:91:8d:4e:c4:61:b3:c8:ba:c3:be:27:6c:bf:8a:30:09:
         5c:3e:1c:b8:f3:1d:bc:9c:6a:bf:94:01:32:bc:08:23:28:a2:
         71:07:bb:6c:00:3b:45:72:16:f6:d8:b0:22:67:31:78:2b:99:
         41:dd:27:2e:0e:bf:9e:dc:37:85:85:ec:69:68:87:90:bd:fa:
         e7:0d:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----