Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File:                     xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier:          pxjGR4VxaAkzJOp7vm80kk7fHLe3HwkLCRuYJwDolbg=
Subject key identifier:   AA:54:CE:6C:5F:5B:9D:57:F7:4B:D8:D6:BF:F4:7C:4E:B6:EE:73:65
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer:       /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial:       01962F06DF1263DFB091E975C3643B046576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number:          0509
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 7qr12EYwsdyti-EmLWqRDogionQ.roa (hash: 5LhmlqfCFcdrvGQgZrfHuGwVjCahrEpoNBu5iKMaA/w=)
                          2: JEh62edtGcPK6W4aI6E72di6xCs.roa (hash: PD42vAZ0BIX3jY6yqazrN5UUOFytkMhASMCFsoaVQJg=)
                          3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: MUn3Yp1VD1WUpcMcTUKYMpHBck1vLpAng0GgZBO/LSQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:df:12:63:df:b0:91:e9:75:c3:64:3b:04:65:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=aa54ce6c5f5b9d57f74bd8d6bff47c4eb6ee7365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:e2:4e:6c:00:19:c4:ff:a6:91:52:9a:c8:
                    5b:ab:0a:47:7c:02:cf:47:ce:f7:09:b5:0e:1d:9d:
                    ad:9a:29:15:9b:9e:90:8b:20:a1:3c:49:7b:00:a1:
                    56:b4:72:a6:b7:3f:cb:5a:d4:75:65:a8:4b:06:7f:
                    98:47:e4:02:3a:e5:56:fc:a5:2e:bd:76:3e:fb:b2:
                    67:e5:5c:bf:f2:b4:b6:ce:44:d0:b2:79:54:32:5b:
                    1e:fa:a1:26:b5:90:82:e1:71:9a:21:2b:45:f5:0d:
                    e9:39:dd:91:1b:bd:4c:63:85:da:24:4a:eb:44:d7:
                    3f:8d:36:14:ea:3a:52:c5:fd:19:f9:91:8e:07:55:
                    ab:16:12:41:df:53:3b:50:18:56:1c:57:69:2e:7c:
                    88:12:3d:cd:35:f2:e7:a5:dc:00:45:df:2a:d0:72:
                    a1:ab:c5:bc:81:8b:ba:b4:a3:a6:2d:1f:66:c9:1f:
                    db:98:4b:f0:62:df:ba:3c:79:77:7f:21:38:7d:bd:
                    11:d2:83:60:16:6d:d0:35:b0:4c:18:10:f6:91:ca:
                    0b:22:9a:99:f4:13:79:cf:6b:66:88:e7:ff:5d:f4:
                    5b:89:9b:49:5f:11:f8:4d:51:67:01:ae:0a:0a:c2:
                    97:4a:4f:29:0b:38:f5:96:2e:15:4b:6f:b7:4d:65:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:54:CE:6C:5F:5B:9D:57:F7:4B:D8:D6:BF:F4:7C:4E:B6:EE:73:65
            X509v3 Authority Key Identifier:
                keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:e0:0a:0b:97:f9:da:17:65:fb:13:cf:74:b4:a1:7c:f5:
         5f:13:3d:8f:9e:e1:22:e5:de:0e:dc:53:97:a0:ea:8b:ae:ff:
         12:d7:83:15:cf:0c:49:1f:42:0e:aa:56:5a:5d:17:ec:90:13:
         18:f5:3b:db:f2:7b:ba:48:02:b8:4c:23:c9:e4:95:47:43:26:
         38:d5:5c:26:1c:6f:de:59:6f:6e:04:ab:12:f4:ea:02:31:10:
         9e:04:bf:24:26:39:86:d2:d9:93:fb:45:7c:6e:af:a2:cf:79:
         8e:8b:08:2f:54:53:de:91:23:c3:1a:43:e4:40:57:4c:d1:10:
         13:b6:cb:6e:17:a9:dc:bd:a1:fc:fc:27:9c:68:ea:e2:67:e6:
         45:28:12:67:49:53:9c:9f:9c:6f:ab:91:9c:48:11:71:98:2e:
         f2:a3:50:cf:6b:4c:8c:61:11:1c:30:5e:71:53:17:ca:5e:ee:
         03:70:bf:c0:cd:37:a5:5a:76:f0:07:77:5b:1c:95:ae:de:df:
         c0:93:08:51:7d:c6:c3:ca:fb:12:25:99:92:6c:d8:22:bd:3d:
         00:4e:e6:07:6a:cb:85:4e:f8:85:df:2c:bb:e1:01:4f:26:81:
         2e:db:a2:96:75:8b:2f:e0:ba:e1:7d:32:db:5d:af:54:b6:a0:
         35:92:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----