Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
File:                     XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json)
Hash identifier:          7oHVeXf7+FjYOMJSpmM7USCTkqiyBv5wiWETztExLTY=
Subject key identifier:   0D:BE:8A:49:5C:8B:8D:7C:D4:F4:45:AF:C2:CD:FF:8A:8A:93:96:BE
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Certificate issuer:       /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial:       01962F06F31BFEF82D1ECAD8D5EF9056E876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
Manifest number:          041F
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: SzmhUfWJuFhyT5TGLouRAgBLoIM.roa (hash: Qov0MeRXvHn6kZBTJQaoc48+Yw0xT2B5xVOV+b6Nifs=)
                          2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: OOwaZBdWGD5jESZC4bwDSfEU5j4EpCnjN10F3TO4C68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:1b:fe:f8:2d:1e:ca:d8:d5:ef:90:56:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=0dbe8a495c8b8d7cd4f445afc2cdff8a8a9396be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:b3:cb:30:29:47:8b:9e:58:ac:a6:d5:90:
                    72:30:05:b3:a3:48:02:9e:a8:20:7b:0f:c7:04:09:
                    d0:8c:37:a9:4f:6a:54:57:60:20:46:08:d9:31:76:
                    a8:c5:e9:66:2c:6b:c6:17:f0:65:b2:f0:ab:1a:01:
                    4c:83:2e:04:f9:2b:6e:0c:b3:9a:50:86:ce:d3:07:
                    5c:c2:b2:9b:8d:ac:8a:9d:e9:49:9f:f0:7c:41:ec:
                    14:75:1c:90:00:af:42:c7:d6:a9:40:fb:f3:7b:c6:
                    b2:2c:0d:95:60:78:01:77:b1:8d:b4:da:34:df:d1:
                    e7:0c:27:c2:8c:6a:79:12:2e:67:66:8b:18:1a:1c:
                    c2:14:6b:f7:3b:da:22:ab:19:c6:b1:4b:bd:be:ad:
                    91:f4:f1:1a:f2:43:b7:2d:4f:bf:a4:5c:50:17:66:
                    cc:59:b3:bf:3c:78:67:54:9b:e3:fb:0a:f7:e3:c7:
                    bb:8f:15:47:4d:b9:fe:12:52:6f:b8:42:7f:03:3f:
                    fa:91:08:e9:43:e4:fc:0c:78:44:da:a4:f3:78:53:
                    7f:cf:b3:30:6b:2a:d1:75:88:de:6f:33:cf:50:43:
                    6e:12:0e:41:77:11:0f:a8:17:95:22:58:1d:ab:25:
                    7b:cf:0c:9b:34:0e:f7:44:db:45:28:51:91:6b:e6:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BE:8A:49:5C:8B:8D:7C:D4:F4:45:AF:C2:CD:FF:8A:8A:93:96:BE
            X509v3 Authority Key Identifier:
                keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:41:6b:22:f9:02:b6:e7:ac:67:12:a4:9d:ad:43:61:aa:
         47:b1:e0:f7:2f:6f:00:d3:69:04:1e:d3:18:da:2b:56:9d:10:
         b6:dd:77:00:87:32:5e:35:1b:46:d8:3b:0d:4b:eb:30:fd:05:
         d5:28:20:60:ce:98:60:8c:fa:79:93:b0:b2:9e:5f:c3:c8:54:
         8f:ed:45:6a:d3:72:99:cc:32:5a:c2:bc:15:7f:75:59:c2:a7:
         31:75:a5:0f:22:5a:fa:3c:70:95:08:e5:1a:2e:38:1c:66:5d:
         bd:20:db:de:8d:96:fb:eb:d4:3b:4a:0b:8f:80:10:ac:87:b3:
         15:97:60:5f:e8:aa:52:7d:11:95:eb:50:3e:a7:4b:da:bd:12:
         a0:04:7e:64:08:93:c1:fc:b9:c0:dd:26:26:1e:f4:c9:d3:5a:
         dd:6c:e7:94:24:ae:6a:c4:e3:e9:be:69:9d:c6:bb:3d:e3:92:
         31:b7:6f:11:44:5c:59:f6:66:41:f4:64:1c:e6:f0:d0:5e:4c:
         0d:a8:e5:4d:43:c5:4f:eb:f8:3b:e3:43:d8:ed:fc:a6:54:c3:
         d9:fa:7b:5d:77:b1:c8:19:28:6b:98:05:9f:28:12:f0:c6:63:
         7c:1f:c6:cd:8a:d0:0e:c0:f4:66:78:d8:09:78:db:07:61:db:
         a3:45:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----