Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File:                     xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier:          BgDbw7vJJHDJCo4KU0iMeK5kdmKgaY8ke7dJDWhyrlw=
Subject key identifier:   B9:5F:D6:45:FA:81:93:4F:30:8B:F8:55:65:56:8E:8F:47:5A:F7:E1
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer:       /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial:       01962E61B632CDE96101542E33C7DE29617A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number:          144C
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
                          2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
                          3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
                          4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
                          5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
                          6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
                          7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
                          8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: N130K3D8m8XcTtCFqdfosTv0v82sTiqKAdtUBlVIlVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b6:32:cd:e9:61:01:54:2e:33:c7:de:29:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=b95fd645fa81934f308bf85565568e8f475af7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:89:7c:59:28:e2:a5:a4:96:2a:b4:16:61:
                    19:9c:3d:ea:0f:91:ef:67:73:77:07:23:ee:a8:b2:
                    06:6c:fe:62:a7:e0:49:93:a5:10:4a:1e:9b:94:cf:
                    d6:53:dd:a5:4d:63:d9:ab:eb:3e:91:1f:c1:00:5e:
                    34:18:4e:e8:68:75:32:50:d1:6f:8c:d8:c6:ee:fb:
                    96:54:5a:58:42:c5:1d:0d:fb:c0:f3:fb:4f:13:3c:
                    7d:4f:49:e4:2f:8e:fd:42:f2:11:46:1b:b3:fa:77:
                    08:e5:88:3f:7c:c7:c3:b4:c4:bc:01:8b:da:e8:67:
                    e0:6c:1d:b7:0c:05:5b:0f:55:fc:fb:bb:eb:fe:ea:
                    8d:bb:23:78:62:65:ce:94:1e:b2:a5:1b:24:27:71:
                    90:0c:22:b0:01:59:75:7e:7b:c6:df:68:3c:b6:9c:
                    d2:35:ef:ac:7a:af:91:c9:c4:e6:48:b5:0c:86:24:
                    21:6f:55:7d:ce:62:8e:22:e6:21:05:b5:ef:ad:6a:
                    71:a3:6e:7d:aa:a9:b3:58:39:f8:ec:52:bd:80:e7:
                    d0:d5:af:83:89:e1:c9:39:7d:2d:2f:ad:32:b0:3d:
                    e3:36:db:c1:82:46:20:71:e2:30:5d:1a:ad:ce:c1:
                    b4:53:a9:8d:74:28:98:e4:51:c5:c0:9e:d3:db:f0:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:D6:45:FA:81:93:4F:30:8B:F8:55:65:56:8E:8F:47:5A:F7:E1
            X509v3 Authority Key Identifier:
                keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:18:72:35:d7:c4:02:41:a7:d8:f7:cf:34:70:99:e2:db:5e:
         38:4a:d0:33:da:33:91:10:74:44:04:61:6f:85:a2:c1:6e:13:
         63:0b:9a:36:a0:36:b4:9b:5e:02:72:9a:5e:d4:5f:62:83:49:
         8f:68:c9:87:a3:9e:66:1c:d0:b4:9b:e2:70:af:61:6e:7c:4e:
         96:4c:c1:39:f2:3d:1c:83:53:0d:09:72:bb:e6:1b:f9:e4:59:
         e9:e0:f2:b3:80:31:6b:60:a1:b6:44:98:41:3f:0d:c4:be:c2:
         0c:1f:3c:69:b2:e6:c6:db:bc:7c:a2:ec:4a:21:4a:da:46:98:
         96:b8:db:a9:4a:02:5d:06:df:74:83:23:67:9c:f7:49:94:a3:
         97:7d:5d:cb:03:42:00:ca:a1:f7:d5:66:74:76:06:50:04:7e:
         a2:75:93:92:5c:a5:99:1d:6c:a3:ae:0f:8f:9c:5b:b7:28:0c:
         2a:51:9b:c2:af:90:a1:9d:b4:14:24:2f:ca:fb:b6:59:07:ce:
         a4:52:23:7e:a4:98:ca:a2:10:d6:c2:2a:b3:54:d3:37:aa:ad:
         c4:55:8b:2e:3e:4d:f9:f1:f8:47:a6:2f:eb:f5:9d:b8:1d:fb:
         e1:80:0a:3a:91:de:15:31:f7:06:80:a4:14:ac:dc:fd:4a:dd:
         c6:9e:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----