Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File:                     xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier:          CJjATFiTh43ogh/Ri36fpaKo9czF8B/6sQzhsD9ES+4=
Subject key identifier:   EA:69:2C:F8:BC:FA:60:8B:0F:B3:1E:50:35:A3:6F:58:EB:19:9F:A5
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer:       /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial:       01962F74BE0386D23454F5AD7E396A22B075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number:          0656
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
                          2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: OBAaMSXPSZj4yEJFUGYiPIReOm31qiBJcGq1AdmoR3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:03:86:d2:34:54:f5:ad:7e:39:6a:22:b0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=ea692cf8bcfa608b0fb31e5035a36f58eb199fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:b2:37:a4:5f:02:85:2b:7a:23:8f:57:9f:
                    6a:9a:fc:54:3f:8a:71:3f:86:8a:94:cc:07:d0:af:
                    a7:be:59:46:f4:2a:9f:b9:93:7a:41:ed:50:ee:36:
                    64:da:ff:27:d1:8d:19:92:9e:1a:dd:4b:69:32:6b:
                    b8:4d:12:73:09:a1:3f:96:2f:23:ed:3b:96:09:df:
                    6e:21:e8:9a:ed:63:91:be:f0:b4:ea:b8:60:ff:56:
                    d9:3f:82:2d:fe:b1:ce:5d:0e:84:9c:d6:1b:7f:6b:
                    13:94:90:24:74:49:4c:2e:c2:25:ee:9d:40:4a:23:
                    c3:c1:4e:09:31:da:40:80:75:04:86:a9:7e:47:8a:
                    49:37:23:d1:dc:61:47:94:81:08:05:73:eb:b7:13:
                    b9:c9:b1:4e:0f:2c:e8:36:30:49:d9:62:a0:13:f1:
                    58:4f:17:e5:b6:51:84:f4:19:24:5d:57:41:e9:4f:
                    c6:f5:16:e4:38:86:0b:f0:66:a0:ab:2c:7f:a1:f8:
                    ae:e8:a2:7f:14:62:46:99:11:90:a1:94:1f:9b:eb:
                    36:c4:25:f7:fe:b3:ba:8c:16:8c:46:59:d4:4e:72:
                    c8:c6:b3:0c:0c:c4:b7:b0:e0:99:2f:78:5d:cf:60:
                    43:a8:d3:96:f4:63:0a:b5:a0:01:d2:cc:bf:d7:e5:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:69:2C:F8:BC:FA:60:8B:0F:B3:1E:50:35:A3:6F:58:EB:19:9F:A5
            X509v3 Authority Key Identifier:
                keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:d6:7f:21:44:a7:fc:4a:da:66:b7:50:78:3e:00:9b:d0:
         1b:bd:d6:e6:63:3d:d6:a9:c2:d5:08:0d:28:a9:c3:8b:43:16:
         e2:06:85:62:fb:aa:00:e7:77:c4:98:df:fd:56:ae:00:dc:42:
         19:21:08:d6:a4:2a:19:1a:bf:30:98:b7:9e:83:8b:db:06:3b:
         80:8c:0d:f9:3a:fc:9b:cf:17:62:e8:d6:0b:c0:39:f0:fd:93:
         92:c2:1b:07:f3:c3:26:ff:c2:c8:41:60:f5:1a:e7:9c:a6:e1:
         35:57:0f:e6:99:f9:c6:b0:2e:90:70:b2:30:9f:66:f5:92:ab:
         8c:98:fa:b8:de:66:1b:7d:18:2a:4a:59:96:16:bd:24:74:a5:
         7b:c8:2d:56:38:5b:00:38:22:e7:2a:49:9a:c2:d2:ef:b8:6b:
         7d:bd:f6:65:30:b9:f2:26:d5:7b:bc:18:7d:5c:fb:c4:8e:d8:
         2b:be:e6:db:fe:e4:e4:28:48:2f:e6:07:4e:ff:18:64:89:01:
         04:cd:88:f3:ee:7f:00:80:0a:9e:14:40:88:59:cb:95:21:9c:
         e9:96:6d:a3:7b:71:18:8a:4b:e1:05:e2:9b:a3:e3:cb:3e:5a:
         cb:4c:6e:0a:58:88:a1:62:f3:63:3b:68:63:9b:b7:94:b2:eb:
         c8:83:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----