Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
File:                     XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json)
Hash identifier:          pAmf7XmnXsI5Gvh85mOXbLO97utCIgelqlANyUV1iXo=
Subject key identifier:   E2:80:6F:33:5A:C0:33:A1:E4:67:A4:99:DC:BF:DE:B6:A8:52:97:7A
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Certificate issuer:       /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial:       01962F3DA5C28FB6B9EA233E9156515280E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
Manifest number:          0DA6
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=)
                          2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=)
                          3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=)
                          4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=)
                          5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=)
                          6: DnZm09VQVuRIuwqOkm3k2ueIEWA.roa (hash: RBldM8MYlGHFUzy97ye7OklsqwtzmV1ubQhhWo9O87A=)
                          7: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=)
                          8: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: WCZmGuHLbaZv3S/YFlkajFVUCX1BLla9CcmLMkl4Z/8=)
                          9: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=)
                          10: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=)
                          11: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a5:c2:8f:b6:b9:ea:23:3e:91:56:51:52:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=e2806f335ac033a1e467a499dcbfdeb6a852977a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:8f:35:68:72:47:45:8b:92:3d:39:cd:7c:
                    eb:fc:80:5d:d1:a1:ab:86:62:c4:ec:c5:9a:a6:e9:
                    93:8f:4a:84:18:bc:2d:75:3b:4e:66:6c:0c:0e:0f:
                    ad:81:fd:2d:b6:c5:fb:1a:9b:ae:16:ed:e6:ad:c8:
                    df:56:26:cd:11:19:c3:61:34:8b:c9:30:6f:01:9b:
                    e6:f2:72:5f:29:73:b5:a1:16:98:16:a1:89:3d:d6:
                    73:c8:e3:6d:99:84:fd:7d:86:eb:3b:42:2c:90:5b:
                    5e:42:52:d8:56:40:4e:c8:8d:51:16:69:2c:85:8b:
                    c3:04:5b:ef:8e:04:31:be:1e:5e:1f:e7:8b:0a:36:
                    09:c0:1c:de:08:c1:73:b3:85:c7:bf:59:1b:fa:6c:
                    1a:4f:73:16:1f:b2:1a:c6:30:dc:27:f3:03:43:cb:
                    a1:bc:bd:d5:d5:d4:71:2a:d1:80:2a:fd:b2:be:f6:
                    94:0f:af:5d:94:cc:da:b8:a7:e1:c6:92:fd:05:c9:
                    1d:77:a0:90:b7:de:3e:ed:80:13:75:08:8b:2e:0a:
                    fc:ad:a6:d2:7b:c3:f7:cc:aa:22:35:36:36:e8:f6:
                    0e:a2:48:dc:51:cd:47:b4:b2:5e:4a:5a:9e:26:01:
                    62:f7:a7:7d:3d:7a:e6:8d:0e:98:dc:0b:97:15:c2:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:80:6F:33:5A:C0:33:A1:E4:67:A4:99:DC:BF:DE:B6:A8:52:97:7A
            X509v3 Authority Key Identifier:
                keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:6d:42:8f:e7:ee:a7:a1:d6:2c:f0:a7:01:a6:9d:df:70:
         13:7d:c0:53:da:32:6c:6b:99:29:b2:36:0b:51:0e:d7:26:1f:
         b3:f3:cd:eb:c9:32:cd:89:52:ae:6d:4c:4f:55:cb:a8:af:5c:
         c8:ad:c4:83:06:70:44:85:64:9f:16:95:8d:d2:2e:3d:60:09:
         66:c3:97:0e:4d:7e:69:ef:88:6d:9a:47:3b:3a:af:60:30:62:
         31:c6:c3:7b:3a:9b:f7:d1:06:cb:91:c0:5b:a3:bc:7f:2e:4e:
         30:a4:e4:8b:c7:8c:8a:3e:0a:4b:5f:6c:ba:93:6a:6f:de:ba:
         6b:8a:a2:86:ca:db:44:14:a8:44:a0:32:68:16:85:f3:50:17:
         e9:39:b3:b7:4a:9e:44:69:2c:7f:c8:81:e3:a9:43:98:8a:4f:
         f5:7f:a1:98:cb:a9:31:de:5e:91:52:25:67:82:fa:da:66:5c:
         a9:09:df:17:7d:46:37:a4:54:fe:31:72:c4:87:b5:e9:1a:7c:
         9b:b1:73:a9:59:18:4d:99:5e:e6:e0:95:f2:6a:c5:35:6f:4c:
         26:e4:2a:b2:cd:0e:b6:4e:3e:88:03:39:9b:1b:f2:32:69:a0:
         b2:c7:cf:2e:7c:04:95:4e:63:92:0b:59:de:31:09:3c:45:27:
         4e:76:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----