Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File:                     XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier:          axALzcH82FTqa9XMTXLJPBJDial+kJAATVyUgOPoy7U=
Subject key identifier:   8D:E4:B2:6F:E3:70:17:8E:B4:B1:42:51:B7:1C:5E:41:7A:14:92:FA
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer:       /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial:       01962F75061684ACBB2A7D30D707CC641D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number:          0C67
Signing time:             Sun 13 Apr 2025 14:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:00 +0000
Files and hashes:         1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
                          2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: e0ifIJlC5aXeeg2CPaTn5JD+sdkrLYzrkoR51gk03Bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:06:16:84:ac:bb:2a:7d:30:d7:07:cc:64:1d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
        Validity
            Not Before: Apr 13 14:02:00 2025 GMT
            Not After : Apr 14 14:02:00 2025 GMT
        Subject: CN=8de4b26fe370178eb4b14251b71c5e417a1492fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:7c:9e:7f:c1:33:1d:7a:a3:21:a7:e9:b4:
                    b4:bd:7c:bd:05:03:04:9a:c2:e7:6d:83:ff:f1:d6:
                    c0:c9:e4:56:ba:28:75:84:0d:d0:f9:f9:22:4f:39:
                    9b:93:1b:cc:99:51:d3:ba:36:90:5c:a1:ae:04:1e:
                    18:d9:c2:c4:d7:97:72:4f:53:31:32:e4:67:0f:26:
                    54:3f:96:a9:41:3e:51:f5:d2:2d:39:b3:57:ad:b2:
                    df:cb:75:fd:9f:45:8d:0e:81:f7:0c:3b:fd:90:f3:
                    5e:b3:65:b5:ad:72:b7:36:1b:87:8e:1c:98:72:97:
                    1e:15:cf:aa:6d:7e:b2:13:76:b0:eb:51:bc:59:8c:
                    c1:f4:8c:33:17:ef:49:ca:7b:a1:00:b2:bf:12:9c:
                    41:18:5e:7f:8c:94:6b:3a:af:90:c8:32:b8:d8:3b:
                    43:a5:16:b6:d6:2c:c0:79:b6:40:2b:c0:e1:e1:d5:
                    65:b7:c1:ac:11:df:5a:25:14:bf:62:08:12:df:5e:
                    96:bf:01:0f:f5:80:c7:a1:ad:76:c2:93:41:fb:f2:
                    3f:4a:85:37:6e:a6:0f:08:d8:95:5d:91:32:30:b1:
                    0e:12:0d:75:13:85:9f:89:0c:9e:b5:b4:63:5b:6c:
                    ce:45:01:57:31:6a:a8:ba:23:33:60:e5:cb:4c:74:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:B2:6F:E3:70:17:8E:B4:B1:42:51:B7:1C:5E:41:7A:14:92:FA
            X509v3 Authority Key Identifier:
                keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:53:e1:72:45:df:ba:a5:fd:5e:a9:9b:b6:31:9d:bd:4b:
         5f:37:f5:91:97:27:60:55:97:d4:49:12:4e:15:12:4f:6e:32:
         04:e7:39:92:05:71:28:7a:72:81:1e:89:7f:89:db:75:fe:a4:
         b2:05:90:ba:95:64:39:1a:2f:ea:4c:aa:9f:46:4d:1e:5b:ca:
         d9:10:05:ba:68:3d:36:d8:f6:48:72:94:d9:cb:78:f5:50:e2:
         fc:e7:47:6e:b3:ec:d2:b6:50:7e:e8:a8:e7:f5:2a:53:4c:03:
         f1:40:28:f9:f9:e0:82:81:22:d1:6a:c4:bf:69:3a:72:cc:5e:
         1b:03:ac:5c:84:aa:34:5a:2b:b6:04:bd:66:75:42:04:48:8a:
         35:7d:16:70:dc:1d:d4:a1:af:41:9f:af:a5:25:7f:dd:f5:61:
         72:32:5e:5e:7e:ee:8a:7b:5b:91:52:b0:8d:5f:62:78:7a:b6:
         42:05:e7:40:04:35:ac:db:c4:c5:08:77:b4:c1:17:65:f4:a3:
         0c:a3:27:b9:df:f5:54:08:83:02:70:37:bf:24:83:cd:41:36:
         17:88:a9:26:9f:fe:7b:f4:3b:1c:2e:fb:12:ee:5c:4d:b0:2a:
         bc:6d:93:f2:84:b5:6c:50:f8:1f:85:3e:e9:47:5b:59:24:01:
         bf:82:20:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----