Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File:                     X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier:          Ls7jz2sU+We3MJLOqKr3zSNnE0AwGNJP6WPzTm6TYv4=
Subject key identifier:   E2:42:81:B6:38:99:70:9F:66:93:5A:00:24:2C:11:AF:11:70:FD:70
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer:       /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial:       01962F069097CB151E9F3802DF92170BC26B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number:          0C84
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
                          2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: eqS2r2D4iN3kZdf5e199jWGRYGVMqnOXiauyQR/Of+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:90:97:cb:15:1e:9f:38:02:df:92:17:0b:c2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=e24281b63899709f66935a00242c11af1170fd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:81:65:1b:e8:08:89:a6:21:c0:fa:a3:a2:
                    a1:36:70:00:6f:01:e5:ea:ba:fe:80:00:ed:d7:6b:
                    73:b9:37:04:80:13:3d:7d:49:34:8d:31:cb:6a:ca:
                    7e:27:f8:9a:b1:77:a3:2c:37:3b:79:ba:52:43:e2:
                    c6:65:70:7e:a0:43:1b:14:0d:ba:0f:57:11:7d:c8:
                    7f:74:85:24:a4:3a:00:a8:e9:13:35:c3:b2:52:0d:
                    63:6e:5b:d2:7a:98:97:7f:6b:e7:7d:ef:3a:50:b2:
                    51:d1:ef:ac:d4:9b:82:54:81:27:c3:85:c2:c9:5c:
                    52:a7:9e:21:75:82:11:b4:3e:7b:03:8c:bd:e2:f0:
                    36:4c:25:e5:87:07:5b:85:74:51:a0:bf:24:a5:36:
                    08:ca:e7:40:ac:10:cc:6e:7d:e6:c6:04:ef:c8:39:
                    60:d2:6a:e7:d5:07:3c:56:f1:bd:0b:3e:18:1f:d1:
                    92:a5:65:ba:87:f5:0b:29:ef:a7:8a:28:be:df:ab:
                    d9:d7:64:0c:3e:a9:52:14:ff:e1:11:cd:96:05:a1:
                    13:d1:b5:30:8c:35:d2:e6:69:d0:b7:ac:64:39:6e:
                    ba:24:6d:7d:a4:96:40:38:2f:f2:d6:8c:23:c9:a1:
                    aa:91:54:35:07:35:42:32:0b:c8:1f:ae:ab:35:10:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:42:81:B6:38:99:70:9F:66:93:5A:00:24:2C:11:AF:11:70:FD:70
            X509v3 Authority Key Identifier:
                keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:3b:bc:d6:3f:2e:f2:7f:15:45:7e:b9:1c:25:4c:29:61:
         60:60:4b:6e:51:3e:80:1f:09:19:0e:83:89:5e:ab:d2:8e:fd:
         4a:c6:60:dc:9a:f8:98:21:b8:06:3c:52:5b:b2:81:1b:1c:b3:
         df:af:12:e9:76:33:ab:89:60:94:6d:cc:85:9b:43:3c:37:e4:
         d3:74:56:54:28:61:f6:cd:86:9c:88:38:2d:56:fe:0b:a3:00:
         dd:c3:5d:63:14:eb:ff:7e:3b:37:db:d5:20:fb:13:18:cd:4f:
         00:ed:49:61:4e:de:97:d9:d8:f5:a1:12:09:49:c0:e9:c6:44:
         70:13:8e:f9:e4:f8:63:83:9d:5f:33:7e:d0:f0:39:b1:84:61:
         fa:33:99:91:74:74:bc:4d:a1:df:be:63:d7:c9:89:78:f8:65:
         c7:19:a2:93:75:e8:27:99:ec:a7:57:2b:8d:c7:3e:1f:86:1b:
         d2:59:9f:46:81:c9:30:02:6e:58:15:e2:ac:bb:84:d2:68:11:
         7f:6d:68:d3:83:72:57:f4:2b:e2:cd:bc:7d:2a:e7:16:2e:27:
         84:d0:d4:a7:69:63:53:3d:9f:e6:86:2b:3d:6f:d5:da:a6:19:
         e5:1c:2e:21:f0:e9:97:46:8b:45:fb:6e:e7:c1:28:d9:7b:2b:
         66:1e:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----