Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
File:                     xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json)
Hash identifier:          q3b9ymZnTWyucCKGyOegPsTHvsOEKdL6rwqEZpjp2aI=
Subject key identifier:   94:6C:53:42:97:9A:F1:35:97:9A:3E:33:EF:8F:0E:C9:4F:6B:0D:DB
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Certificate issuer:       /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial:       01962F3DB07794C70821544A6C4E2E9E48CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
Manifest number:          1521
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=)
                          2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=)
                          3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=)
                          4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=)
                          5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=)
                          6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=)
                          7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=)
                          8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=)
                          9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=)
                          10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=)
                          11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=)
                          12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: nQNqxczDey6qwXwYiD5Kmw8XiX8Zoiq5MHpqoY9z2XQ=)
                          13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b0:77:94:c7:08:21:54:4a:6c:4e:2e:9e:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=946c5342979af135979a3e33ef8f0ec94f6b0ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:56:7a:8f:fb:e5:f5:82:46:ec:bd:72:85:
                    65:ff:63:c2:32:27:24:0f:da:11:96:ae:56:79:06:
                    a6:0a:6d:f2:02:e2:f2:54:8e:2d:a3:7f:32:66:72:
                    e6:5d:f4:19:b3:ff:b0:1a:73:d1:9a:75:c0:77:9c:
                    9e:8c:83:92:e3:b2:92:33:7e:20:d3:e2:2f:83:34:
                    1d:b6:88:5a:03:23:70:bc:9f:9f:cc:42:04:78:9f:
                    5e:1c:69:d9:31:c1:99:2c:1d:94:44:8e:65:c8:37:
                    2c:50:52:24:b8:71:f4:c9:2f:b9:e0:c9:ab:08:00:
                    d3:09:ab:d6:6b:07:e2:5e:c6:68:5f:cf:bb:91:a9:
                    80:ce:88:a6:5d:b4:29:df:09:1f:3e:39:64:60:d9:
                    e4:40:5a:d4:44:f1:ee:e7:cb:db:4a:97:b7:6b:bb:
                    3a:ec:3b:51:c8:23:52:27:04:5e:8f:fe:2a:b7:ac:
                    f0:c8:1a:b3:0d:74:55:74:ff:96:28:ae:f3:53:e1:
                    53:73:91:a7:94:ce:c9:fc:ff:62:e6:40:31:6a:86:
                    a6:c8:22:4a:6c:f0:e5:a7:b4:b8:f6:32:40:a5:1e:
                    47:40:44:2c:59:13:7c:c4:9c:ed:28:e9:c4:12:b3:
                    77:53:79:33:82:9f:c6:41:16:c3:b2:7c:e0:03:e7:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:53:42:97:9A:F1:35:97:9A:3E:33:EF:8F:0E:C9:4F:6B:0D:DB
            X509v3 Authority Key Identifier:
                keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:ea:bf:3a:15:74:a2:81:69:92:a5:a4:01:c3:bb:8b:03:
         14:0e:28:3c:c2:1f:d6:24:31:3d:ad:6e:ff:b3:f7:58:15:89:
         37:3f:0b:93:93:a3:02:3c:4f:d5:54:e2:70:99:25:d0:1f:12:
         80:35:67:83:06:55:72:ac:89:a8:8d:d3:e2:23:28:14:ac:ca:
         a5:4b:6a:85:90:1a:38:2c:42:5d:07:52:5d:55:a7:6e:44:91:
         6e:c5:85:ea:e4:ab:74:a3:ca:9e:ce:b3:b9:11:39:36:b9:09:
         29:86:d7:08:f7:af:5b:a3:d4:36:da:64:35:2f:2f:7b:05:ba:
         91:fb:db:96:33:54:a5:c6:12:7f:42:bc:20:3c:44:5a:10:38:
         87:74:9a:14:0f:28:66:f8:f4:4a:4b:4f:fe:0a:65:04:e2:5d:
         a8:87:64:86:56:24:ee:fb:90:db:af:71:3d:70:76:e5:eb:72:
         97:50:1a:53:43:8d:14:61:2d:ca:12:3a:5e:d1:dd:dc:e4:89:
         95:eb:25:3f:95:87:6c:43:d5:8a:09:09:17:78:75:1d:4c:bc:
         72:bb:c6:f3:c6:04:19:fe:d5:25:50:23:9a:16:e3:38:d3:ec:
         cf:f6:ed:ca:10:47:75:60:66:f4:c5:cc:b8:fe:a7:f9:4a:97:
         1b:8c:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----