Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File:                     XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier:          eW6ToXC9oP2BOFdK4qcp6mVZRKiIH82KmuAcoZdoNmc=
Subject key identifier:   17:6D:C2:FD:9C:4B:7F:84:3D:D8:89:6A:83:C0:8D:97:B2:72:B3:E7
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer:       /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial:       01962F7427432ED0347026C332188D88B795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number:          146A
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: eAYJm0Coto81rEu1a7f0p4odUri0IJvuYfEVs2/QFRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:27:43:2e:d0:34:70:26:c3:32:18:8d:88:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=176dc2fd9c4b7f843dd8896a83c08d97b272b3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:f9:85:9f:75:96:b9:c5:7d:84:1c:41:c9:
                    06:73:30:ff:70:84:8f:5c:74:09:ce:a8:70:fe:77:
                    92:26:00:c0:3b:e1:06:31:87:82:67:6e:c0:cc:cd:
                    ca:f0:40:05:e3:c8:f3:f0:52:f0:27:a1:00:20:3e:
                    b2:c6:4f:ac:e9:6b:10:50:dd:4f:86:49:e6:41:56:
                    39:c8:c3:a9:27:be:c3:cc:0a:24:0c:43:64:6b:c9:
                    2c:29:83:19:2d:aa:2c:0c:57:4e:f9:8a:c3:22:ee:
                    f0:d6:a3:39:d4:6a:ed:3f:d2:48:2f:c6:7d:b5:b2:
                    76:37:85:40:5b:c1:2d:17:a4:d9:62:47:ae:80:26:
                    f2:9a:29:a7:a7:0a:f0:9f:5f:99:62:ee:51:9e:68:
                    59:de:0b:5d:b1:42:6a:cc:50:fb:89:18:da:29:a9:
                    50:4e:7d:6e:17:3c:a4:d7:58:23:db:4f:66:1b:f8:
                    6f:d7:eb:d8:03:2d:62:d6:ed:4d:87:d3:46:33:cd:
                    53:c7:76:5a:71:19:1c:0b:68:a6:f5:81:50:a2:c8:
                    c2:58:04:40:57:11:d5:ed:12:65:82:ef:f8:db:79:
                    29:69:72:c9:4c:29:03:90:8a:0f:9b:83:52:8b:21:
                    90:77:27:2e:a2:85:e3:79:29:3a:db:97:1e:72:69:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6D:C2:FD:9C:4B:7F:84:3D:D8:89:6A:83:C0:8D:97:B2:72:B3:E7
            X509v3 Authority Key Identifier:
                keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:af:12:27:a6:49:a7:62:26:0a:82:3e:1b:09:c1:8c:e6:
         5d:5b:c6:b8:b9:d9:0c:91:36:4a:1c:05:a6:2d:f5:78:b2:4f:
         6b:d8:a0:bc:b2:d7:61:38:28:8d:a8:9a:4c:dc:cc:ff:19:1e:
         8d:78:9e:06:6c:fc:3c:10:01:39:ea:fc:e5:c2:1e:5d:3a:c9:
         fc:4d:ba:11:f8:73:2a:82:97:e1:d7:78:9c:1d:34:8a:92:1b:
         95:28:58:07:bc:1b:56:c7:9f:89:d5:da:51:0f:c4:d5:0b:02:
         bc:33:03:7c:84:4e:c2:ec:10:61:d3:e8:39:f7:9b:16:4f:9a:
         03:27:1e:c8:bf:f9:7e:4f:7a:d4:5e:35:bb:22:00:1d:17:11:
         bd:6e:0a:8b:34:d5:d4:2a:1c:35:ff:a0:a9:8d:aa:91:c7:2d:
         98:c8:0b:32:8a:51:b2:96:cf:c0:d7:70:ea:c8:93:0c:65:e9:
         18:81:2b:0e:52:65:a4:83:4d:6c:7c:33:72:97:ea:c6:ab:d1:
         f7:5f:11:c0:00:79:9e:b9:a4:64:6b:45:1f:06:fd:7b:35:60:
         17:fd:30:04:1a:c5:05:54:7a:58:f8:5c:e7:e4:95:5d:41:82:
         89:aa:7c:df:20:9b:aa:76:79:61:ca:6b:0e:31:b1:bc:87:2b:
         6d:5f:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----