Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          ycRnNXC0ZjxxcSy/ntThbcubeGOLwmiJGLoEIf3IpR0=
Subject key identifier:   98:D0:2A:CE:87:1D:EF:CD:34:D6:89:72:C1:AD:8E:06:FB:C8:1C:20
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       01962FAB198B87D3C2FEF87739F6FE646AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          03C9
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 4aLpoXObM3ew7yN9vHEAPc0fnWk.roa (hash: ar8XjMMpMsT7IlojVLcbANVoZnXxQWrx82eUQGbYerI=)
                          2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: rMrfCXYnkukdpv20zpyUJ8XYWtvcPHtP2TDnCJLG5t0=)
                          3: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:8b:87:d3:c2:fe:f8:77:39:f6:fe:64:6a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=98d02ace871defcd34d68972c1ad8e06fbc81c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:29:3e:d8:f1:b8:e9:aa:fa:a5:4b:89:66:
                    f0:50:98:d2:ab:6f:4d:e3:45:25:ed:4c:8b:bd:60:
                    7f:73:ab:9b:5e:52:2b:88:2c:6f:ea:4f:82:05:93:
                    77:32:0b:41:01:d4:80:37:b8:8c:35:a9:7c:41:5a:
                    f1:f4:ef:c5:10:78:b2:6d:96:9d:08:94:82:0a:65:
                    59:1c:c8:eb:97:7c:81:b8:a5:0f:e7:42:c7:22:c3:
                    5a:22:82:37:d4:5e:27:6e:3a:b3:77:44:8d:44:81:
                    4f:d9:f9:21:08:a4:3d:af:6e:03:54:e8:f8:0b:38:
                    b7:67:2c:2d:8d:53:c0:03:34:b3:7b:05:b7:d7:1c:
                    da:b5:dd:2c:5e:a6:91:fc:7f:0c:ef:07:01:41:50:
                    e9:32:39:23:03:92:5a:7e:9e:9c:5c:be:fc:68:d4:
                    e5:7a:66:23:68:dc:11:09:c4:f6:40:7a:c8:67:68:
                    69:41:cb:3a:53:2b:5c:40:33:73:08:b2:b7:86:49:
                    bf:67:07:99:4c:43:bb:5d:44:83:76:0e:87:b3:00:
                    5b:9d:ba:7a:0c:b3:af:1c:5f:d8:57:1f:98:4f:6a:
                    10:b8:7e:e3:97:23:aa:c4:c6:02:f9:b3:b3:fd:62:
                    c1:05:65:93:77:ef:d3:d3:f5:e7:a8:95:a4:60:a5:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D0:2A:CE:87:1D:EF:CD:34:D6:89:72:C1:AD:8E:06:FB:C8:1C:20
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:d3:8d:98:69:a5:df:48:d4:e9:4c:af:d1:8f:76:02:df:
         38:b2:0b:db:28:17:a7:5d:16:58:78:ba:db:9e:a7:cc:95:fa:
         c0:96:1e:8a:2a:48:00:ce:ff:0a:35:9d:cb:1b:8a:3d:d9:86:
         18:ec:03:12:21:44:98:9c:72:b5:1d:fb:c6:f2:f9:f7:53:76:
         d8:1c:62:f9:29:85:a3:f7:ad:9f:50:5d:30:0f:7b:d0:dd:b2:
         c3:a3:db:ab:5a:6e:5f:4a:7d:6f:17:bf:22:d4:2e:c7:b1:f2:
         57:b6:aa:83:2a:f3:94:f9:26:ed:0d:69:85:fc:dc:55:b6:10:
         87:e9:95:fa:87:d3:9c:ec:3c:ce:0c:7d:ed:97:2b:38:12:07:
         77:50:ab:35:0e:f5:da:7a:bf:1b:9a:1d:11:6b:7c:8c:47:01:
         40:38:30:50:e9:93:fa:5f:a1:70:c0:79:20:2f:ab:c3:31:ef:
         c4:cf:b2:9c:b5:28:4c:83:8b:55:9c:ac:de:6f:53:22:40:92:
         27:3a:66:51:7f:89:27:9f:f9:11:3b:9a:18:58:c7:fc:8d:f1:
         b4:d0:c3:03:d5:8e:6d:bd:0d:c0:99:13:23:23:e3:ba:60:24:
         84:c7:d5:4e:e2:00:c1:43:d2:4a:bd:35:ab:0e:25:eb:bb:43:
         d3:a8:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----