Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          QDt2AkSWN45oO0utiCkiF6C5ATiaYjV3VCrVOMaKaS8=
Subject key identifier:   8D:5D:B9:AC:90:EB:EE:11:DB:78:7B:A4:3F:18:A9:D9:68:23:06:BD
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       01962E2B2690C18B6B7A4F5E0371A1FC6C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          1502
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
                          2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
                          3: QwE0tg9LdKDVZgDoLhxVp6PBffA.roa (hash: yMurYSYF30pu2PNCcOKhyaRqq0L6zG0Fnt31htAIGs4=)
                          4: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: 1kOP+3HbWmJVr3Li7LClUaU9akjbBhhFsagsz5L+v8s=)
                          5: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
                          6: h1tX918Ru7wMIHZ954P0v306Xyg.roa (hash: Zg0OUrwbI/zN84U1nYJmwSF5Cq40+ooxa0FqsV8xXqQ=)
                          7: nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa (hash: Uo4ERWbv/tv9kXt93hPjc50gZuYNeg1Dqy1Fb1Nzfa4=)
                          8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:90:c1:8b:6b:7a:4f:5e:03:71:a1:fc:6c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=8d5db9ac90ebee11db787ba43f18a9d9682306bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:18:05:a6:0c:6c:4e:39:e7:e9:53:4f:22:
                    ea:16:a6:bc:8d:d9:e2:e6:39:6a:9e:29:db:f8:f0:
                    a4:e8:66:32:89:8b:f8:79:1f:a7:4a:d2:01:c7:91:
                    a8:ec:a6:6c:09:c0:8f:8f:53:2b:c7:fe:7f:af:20:
                    72:9f:25:5a:2f:86:2b:50:04:53:9a:ae:14:05:01:
                    bc:ed:45:62:b7:67:5c:62:3c:29:9d:3b:e9:fd:43:
                    8d:97:03:fb:53:83:2e:16:79:87:5a:62:61:2a:d3:
                    35:87:ab:9d:d7:19:d8:e3:5e:5c:c4:3f:af:bf:02:
                    ae:8b:2d:dc:64:2d:02:0a:8f:2e:83:83:4f:2d:f3:
                    da:4a:65:e9:02:aa:8a:ac:0b:29:67:1b:b2:44:97:
                    87:ec:9b:fb:bd:ff:98:5b:de:5a:81:62:68:c1:51:
                    91:a1:df:84:99:0d:fd:93:08:0b:36:4b:4a:6f:01:
                    b6:19:4a:07:10:18:72:36:2e:c9:89:e0:1e:80:d1:
                    bc:0d:34:5f:83:b8:c4:be:35:43:97:8e:43:13:20:
                    86:fe:62:6f:93:dc:77:78:85:5d:55:92:9c:30:38:
                    24:ab:9d:a9:fb:94:46:04:47:b8:63:fc:6b:b0:a3:
                    07:7d:7c:15:a0:ad:02:60:bc:91:b7:e5:eb:d3:97:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5D:B9:AC:90:EB:EE:11:DB:78:7B:A4:3F:18:A9:D9:68:23:06:BD
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:51:80:bb:12:95:19:3b:14:bc:c2:df:8d:c3:57:bd:59:
         eb:e2:c7:2b:03:2f:83:60:37:62:d5:80:db:b0:fa:bd:2c:dd:
         fc:da:b3:70:b3:b8:be:0d:14:aa:2a:49:ec:55:ba:11:bb:cc:
         8d:d7:ec:58:72:55:8a:d7:e1:63:d5:d9:58:7d:ad:3a:81:36:
         06:c0:85:58:66:34:07:fb:d3:ea:b8:ae:b5:67:dd:40:dc:9d:
         07:bd:f8:37:44:70:d9:69:2f:b0:4f:06:91:a5:ff:73:23:3a:
         b5:c7:8c:38:4f:fb:9f:68:97:e6:a6:6f:a5:71:4e:c5:49:93:
         f7:01:11:81:7f:69:3e:2a:e3:ed:8f:c8:fe:42:ee:72:6e:76:
         30:4e:08:d0:0e:e4:a5:af:f8:87:18:e9:3b:eb:35:4c:0d:a2:
         de:ab:a4:f6:e8:a0:9c:be:7b:dd:e3:aa:c9:e2:cd:0e:84:12:
         69:3a:b9:1d:55:70:3e:e9:0e:cd:64:39:e7:38:6e:46:20:e9:
         b0:2e:3b:02:55:e4:46:af:85:bf:6b:27:1e:7c:92:b8:fc:7b:
         86:e8:f4:04:4b:da:29:92:d0:c9:09:c4:61:3a:d9:61:d4:73:
         b3:e4:f5:11:c3:06:94:d2:a6:36:e0:e4:dc:2b:be:c0:8d:b3:
         6f:2b:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----