Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File:                     xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier:          75tir2SN3tqRD+K7s+CqiykcDjIZZw9O9wqvXXs76yM=
Subject key identifier:   AD:4D:2F:83:76:7A:F4:8C:5E:7C:12:AA:A9:CE:E3:07:30:B5:F4:F9
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer:       /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial:       01962E987D522609E74666898AC3054C3AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
                          2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
                          3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: +7rbYFmqax52zhADg1cItQnpV3JngVvBDPn7xQGk8wA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7d:52:26:09:e7:46:66:89:8a:c3:05:4c:3a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=ad4d2f83767af48c5e7c12aaa9cee30730b5f4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:bd:d3:43:cb:7b:10:99:cb:3d:1a:62:f7:
                    13:36:42:a5:90:30:60:49:ba:c1:83:0c:e8:81:38:
                    80:8a:b9:83:1b:3b:e2:40:8f:76:2a:1a:29:a6:e9:
                    df:9c:de:8e:94:1e:f7:3a:43:bf:7d:29:13:3b:7c:
                    c4:96:62:de:c1:ef:e6:99:ac:29:aa:29:13:59:b8:
                    1a:c6:d0:c8:8c:d2:81:f6:d9:26:c7:27:3e:a1:8c:
                    3a:02:b2:c7:2d:ff:90:7c:ad:c9:75:3b:fd:2d:73:
                    fa:59:99:d5:77:5d:47:33:4a:b7:91:2b:d8:9e:db:
                    9c:ec:90:65:b9:48:4d:cb:f8:e4:6c:d0:1a:b7:45:
                    9d:39:ff:9c:b7:91:47:a3:f8:4d:f6:95:56:aa:d5:
                    5e:1c:67:dd:9d:8b:5b:8c:36:25:fc:53:8c:40:58:
                    6d:35:5d:bb:69:c5:03:29:33:db:78:b1:c3:2a:e7:
                    4b:bb:ae:45:f6:35:16:5e:68:f3:99:a3:9d:51:65:
                    6e:ac:3e:4f:ad:63:2f:de:4d:f8:11:68:15:03:b6:
                    31:a4:72:e5:09:ba:1a:f6:f2:16:6d:64:49:5f:3b:
                    8f:1b:0d:90:1c:71:99:8e:67:b7:df:73:09:89:8b:
                    cd:18:5f:56:ae:0b:ba:f7:3a:45:86:cb:a7:7a:31:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:2F:83:76:7A:F4:8C:5E:7C:12:AA:A9:CE:E3:07:30:B5:F4:F9
            X509v3 Authority Key Identifier:
                keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:64:92:4b:a5:d9:c5:d8:92:d2:a8:12:33:bd:69:a9:34:56:
         af:6c:54:a6:41:00:c9:b7:d1:cf:77:ef:e4:b2:ec:0a:70:6d:
         f5:cf:03:50:b6:63:c7:83:9c:42:7d:53:d6:23:fe:a6:e1:29:
         12:9b:49:da:83:76:94:92:a5:dd:d0:06:ba:8a:92:dc:a4:45:
         25:0a:31:d9:02:4a:8a:27:e1:66:f5:65:91:9a:d1:42:d4:89:
         e4:e5:1a:f1:09:65:77:a1:2c:91:77:e5:9e:92:20:e3:d3:43:
         89:86:47:38:92:2e:fb:a1:1b:73:e6:98:52:02:9e:38:a1:37:
         36:ac:5c:33:8c:a5:c8:0a:c2:a1:6a:8c:93:14:6f:ad:9a:20:
         44:54:23:7c:c3:3c:82:6a:64:b3:d0:d8:87:56:72:77:e2:fb:
         cd:ce:58:c3:f9:b6:bc:8a:9c:7c:78:be:f6:bb:f7:9f:f7:ae:
         4e:bb:0e:5f:91:34:9e:12:6c:83:fb:ba:87:69:d3:67:4c:56:
         40:2b:3d:18:3c:29:ac:4c:c6:af:ac:19:ea:d7:51:bf:5b:30:
         07:f4:9c:c3:fe:d9:ea:07:53:bc:44:63:ff:2c:5d:72:68:b0:
         67:19:5c:65:b0:a4:c5:48:a6:e4:70:e3:27:f7:b5:98:c3:78:
         ce:0a:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----