Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File:                     XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier:          aSSWexaP6TpKB6joWQUbwADJdXCRvR9Joh5DcclgrsE=
Subject key identifier:   9E:B8:12:FA:A8:8F:34:91:02:BB:0C:88:05:75:38:CA:EE:FB:37:0D
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer:       /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial:       01962E2AC4ECA881522B25F7BD0D6212D779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number:          1295
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: k+bug17s43uEC8Ae0rF9Ch37r6veNfCjz0kqQum+kC0=)
                          2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:ec:a8:81:52:2b:25:f7:bd:0d:62:12:d7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=9eb812faa88f349102bb0c88057538caeefb370d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:58:0b:9e:ba:7a:9f:47:ea:5f:93:44:8b:
                    3c:3e:d9:4f:29:9a:0d:7f:84:19:44:47:16:d0:8b:
                    b4:1e:f4:da:eb:8a:53:ce:0d:40:ca:db:f2:46:e2:
                    ac:82:9d:98:c5:15:3d:cb:87:16:dc:41:a5:b4:95:
                    63:18:7c:7f:c2:53:09:b8:b9:2c:e7:df:a2:94:8a:
                    16:64:4e:66:c6:b3:69:8e:0e:f8:2f:cd:c5:d5:e2:
                    d9:98:0a:1f:0b:1f:0d:f5:59:10:eb:c8:f8:de:a8:
                    16:f4:e8:d8:c1:b9:d3:1c:e5:b1:b2:01:c8:0f:d6:
                    72:86:34:73:3b:c7:f7:ed:c2:de:e1:4c:e6:5f:42:
                    dc:8a:60:8b:3f:e4:42:02:d5:c2:cb:8f:57:01:5a:
                    55:11:61:78:f5:86:ab:b9:07:6e:d1:4e:fd:7f:45:
                    28:2b:2c:49:6e:d5:38:3c:ac:d0:af:32:94:b5:f5:
                    d6:6b:02:ce:06:51:64:0e:21:6b:01:ac:96:af:93:
                    82:34:e0:be:73:51:7d:4e:32:5f:b9:3e:37:8b:cd:
                    99:c0:7a:38:4f:f1:89:73:0d:d6:4a:fe:e7:bb:f4:
                    70:b5:26:c9:25:6c:15:3f:6f:00:90:1f:69:6b:56:
                    99:49:19:3d:84:1d:e2:fa:e1:95:3a:78:55:66:19:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B8:12:FA:A8:8F:34:91:02:BB:0C:88:05:75:38:CA:EE:FB:37:0D
            X509v3 Authority Key Identifier:
                keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:53:5b:29:6e:1e:6a:4b:09:24:fc:36:f2:51:f7:bb:10:
         b8:27:a1:24:00:3e:64:cd:61:b1:be:f7:e4:87:6b:40:d2:08:
         b0:7a:94:1f:61:9e:96:e3:ac:72:86:e2:ed:81:71:eb:5b:35:
         11:56:ee:34:ff:b1:b9:a9:60:3b:a6:f8:e7:1d:40:a0:49:d6:
         91:9b:34:1a:c2:12:fa:2f:ee:6b:6b:97:8c:55:f5:2b:dc:5a:
         75:ff:e3:50:24:86:83:16:b6:f1:7a:cc:44:d2:c7:10:f4:6d:
         a9:64:87:10:c4:6a:55:01:e8:dc:f6:8c:ae:18:fd:1d:1c:65:
         5c:1f:cc:10:65:8d:c5:1f:50:a0:20:68:c8:b2:b4:6c:b4:b1:
         67:93:d8:b7:f7:d5:d5:e4:42:9b:46:e2:61:75:55:f5:40:a2:
         c9:ce:38:9a:32:39:57:35:6e:df:c7:66:cb:7e:70:70:6a:a9:
         85:84:45:a8:0e:3f:4e:60:f3:a2:6b:65:6f:ee:bb:59:9a:f2:
         72:0b:f5:84:80:12:e3:dc:59:65:2e:b0:64:67:95:24:d9:dc:
         ec:5b:ad:d1:1f:7b:2f:28:b0:9d:d8:6a:ff:8f:45:11:c9:3b:
         1d:c0:0b:98:40:90:7d:bd:b9:ba:58:1e:e4:e2:11:04:1a:7e:
         15:96:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----