Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
File:                     XPRYPgFOuFcBj-61ySzhdToJy6A.mft (raw, json)
Hash identifier:          50Rg6Vwq6PKxNz+X20tYa+RWZFVyUYaK2+Vy9Oy8DdA=
Subject key identifier:   F8:EB:E6:27:42:6A:13:1E:4E:5F:05:77:0F:E2:6F:F5:C3:E8:B0:D5
Authority key identifier: 5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0
Certificate issuer:       /CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
Certificate serial:       01962F3D9F15899D077A0E72C1B4F0C4D172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft
Manifest number:          7D
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: TXFkFxk0go0Y2-GlYi6JLFAQr8E.roa (hash: /I3Hs2InDf2N1C0cd7n3+qfO4ge9onR8lMBOsgpKwyE=)
                          2: XPRYPgFOuFcBj-61ySzhdToJy6A.crl (hash: HUcKZ6FRd2ZFNgQ1Q6k+qfCdwOWuO/vKJQgumpZU6AM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:15:89:9d:07:7a:0e:72:c1:b4:f0:c4:d1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4583e014eb857018feeb5c92ce1753a09cba0
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=f8ebe627426a131e4e5f05770fe26ff5c3e8b0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:a5:de:f3:84:a4:71:1b:e2:99:07:67:27:
                    22:de:0b:e9:3c:67:38:bb:ec:30:7f:67:d6:20:dd:
                    0e:a4:25:40:ad:a9:3b:38:66:d7:b5:70:94:a2:81:
                    c4:02:a8:19:00:b9:ca:33:08:97:ec:a5:7e:e3:bc:
                    2c:15:c4:4e:74:8f:aa:b7:87:90:80:78:7d:df:a0:
                    d1:fd:7c:3c:8e:b1:33:51:a1:da:ac:29:c0:c2:7c:
                    46:32:a4:e7:c3:20:a1:7b:4b:81:1f:a5:57:a1:8c:
                    86:89:94:b8:82:2d:96:be:77:ad:e3:c9:b8:7c:75:
                    e3:1f:a3:4e:05:1a:f4:22:55:b0:35:83:4b:8b:7f:
                    d1:46:ae:47:ea:a3:8d:55:17:b0:eb:c6:05:94:bf:
                    4d:06:c0:4d:1b:f3:dc:d9:c3:fb:a8:55:a3:ef:74:
                    80:d0:93:02:3b:7b:b1:56:d2:ec:fe:ec:52:7c:57:
                    76:7d:1b:a7:1d:5f:e3:86:b6:27:05:92:cb:06:75:
                    eb:59:7e:68:26:04:4c:2c:dc:d7:58:7f:2c:5e:9e:
                    0a:55:f2:de:6a:48:8e:96:d3:99:2a:8b:24:67:0d:
                    7a:af:6f:e9:86:c1:d7:ba:1f:47:e9:e9:cb:96:38:
                    89:58:76:1f:90:6c:d5:fa:ef:a5:06:e4:d0:19:26:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:E6:27:42:6A:13:1E:4E:5F:05:77:0F:E2:6F:F5:C3:E8:B0:D5
            X509v3 Authority Key Identifier:
                keyid:5C:F4:58:3E:01:4E:B8:57:01:8F:EE:B5:C9:2C:E1:75:3A:09:CB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRYPgFOuFcBj-61ySzhdToJy6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/087d25-6db5-4285-ad76-ad7dec11bc5c/1/XPRYPgFOuFcBj-61ySzhdToJy6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:ed:91:59:31:3d:83:ff:a5:d1:93:ee:80:0d:60:82:05:
         63:31:a6:0e:15:2a:cb:fc:94:58:1a:43:14:f6:89:b7:28:d0:
         34:58:9a:be:68:ac:67:18:35:bb:c3:72:37:8d:ce:0a:15:45:
         32:9d:b4:3f:a4:cc:01:c3:44:3e:b2:4b:00:cb:80:5d:4a:f7:
         8f:04:fd:a2:66:48:40:c4:a0:63:82:72:2c:fb:fc:c7:3c:69:
         d5:12:ff:74:0b:7c:95:e3:71:f2:4b:7e:0b:98:02:94:cb:d0:
         57:7b:29:9f:e6:cb:82:10:e0:40:b9:cd:65:28:4e:f9:7b:5a:
         20:6a:b5:e6:ab:40:a8:e6:63:4a:ad:5f:9e:ae:be:8d:7b:2e:
         2a:ad:69:7e:18:c6:0f:c4:ca:fe:d8:58:51:8c:da:9a:89:27:
         de:c1:b2:e5:8d:cf:d2:01:3f:f3:3b:14:39:9e:0a:b0:19:71:
         d8:6e:92:4b:39:fe:2c:d4:a7:cf:75:f9:f1:f8:20:01:1c:85:
         27:3e:f5:e8:dd:5f:af:49:50:65:6f:c5:a1:b7:a0:a7:da:46:
         25:ad:ce:72:69:00:ff:af:b1:97:cb:1a:17:e3:62:79:ec:f9:
         ed:f4:ab:25:78:87:37:f7:98:e7:c1:25:89:cd:79:2a:ff:75:
         06:3c:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----