Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File:                     XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier:          d9NfFZpR2DicBG/u6Eo07SdMviS+Ml+WNBWODCImqHI=
Subject key identifier:   AC:D2:BC:55:14:68:7D:B7:8C:54:3C:7A:50:EF:3E:51:6E:FE:1B:15
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer:       /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial:       01962F3D739B559DAC923FA0F6DE1F2773C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number:          12C4
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
                          2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: UXzznkxP9PNObrN5I5+SMM0HC1mUHnRuPVn07oBjBzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:73:9b:55:9d:ac:92:3f:a0:f6:de:1f:27:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=acd2bc5514687db78c543c7a50ef3e516efe1b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:c8:b2:05:2a:bc:5f:91:b4:ad:24:07:b6:
                    d4:ed:ba:88:8d:c7:c9:39:65:f6:be:83:bc:b0:bf:
                    bf:00:22:86:97:a2:91:ca:87:40:f7:4d:5d:49:cb:
                    aa:52:64:f8:2c:ab:d5:c6:cf:9e:d5:8b:3c:e2:f7:
                    cd:df:bc:42:e9:1c:0b:40:7f:9e:e9:84:56:96:65:
                    9b:92:84:70:3f:d2:78:42:f7:9e:33:f6:2e:80:3c:
                    62:d0:9b:97:85:9a:80:ef:af:5d:b0:6e:c9:20:ec:
                    37:82:41:b0:52:c1:bd:26:35:3e:3d:4c:03:08:50:
                    3f:c9:59:47:fe:0c:96:0c:65:03:b7:4e:a5:2e:11:
                    54:8e:45:22:0c:81:1f:be:5c:7e:20:45:51:ff:70:
                    ca:5b:1f:ba:8e:fb:18:53:b3:6d:83:8f:b3:df:a8:
                    31:8b:87:51:cf:2e:7f:99:8c:60:07:72:67:8f:62:
                    41:57:da:aa:cf:7b:8d:0e:a8:e9:94:d3:f4:e3:9d:
                    13:d0:0c:86:fc:32:2a:75:a1:49:b0:89:10:aa:69:
                    07:32:d6:2e:db:31:4e:6e:70:57:dc:2f:44:9a:fd:
                    5d:64:26:e0:3a:45:55:90:7a:d7:51:b5:ed:b5:97:
                    3d:bd:8c:97:33:6c:ab:ea:dc:81:7d:1a:9e:4a:d8:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D2:BC:55:14:68:7D:B7:8C:54:3C:7A:50:EF:3E:51:6E:FE:1B:15
            X509v3 Authority Key Identifier:
                keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:08:52:d4:26:a4:de:cf:c1:88:61:3f:26:84:84:8e:8a:
         69:05:58:e9:48:60:05:14:b6:e0:b9:ea:fe:8d:6f:89:2b:61:
         d3:99:da:c2:72:df:02:36:ba:94:1c:3f:44:98:d0:6c:83:1b:
         57:dd:79:ca:7e:ca:11:b0:62:6e:2f:7a:d0:b9:89:c4:0b:a7:
         a1:dd:83:76:26:ad:2e:d5:16:d9:f0:52:b0:cd:3f:2e:c2:92:
         cd:1f:37:0c:3f:11:cb:03:f1:f6:5e:c5:20:05:8f:6b:fb:08:
         2b:cf:8a:60:25:e9:d9:54:78:ca:7c:9f:87:95:68:84:80:86:
         78:39:a2:48:cb:d0:f6:c8:01:64:0a:7d:94:97:5b:36:44:4d:
         06:57:32:3e:b6:51:53:ee:c2:d6:14:e3:74:de:29:b8:30:d6:
         6b:c1:fe:8e:ad:a3:9f:19:b6:5c:58:bf:98:64:4b:77:6c:a6:
         50:58:22:bb:b3:cb:a9:d4:91:e3:42:77:e8:79:c4:51:64:fc:
         62:f5:a5:74:6d:e3:87:85:4d:31:18:fe:51:e0:6e:5c:1e:ff:
         29:7a:aa:c2:e9:65:a7:41:d3:90:fc:f5:11:83:56:b1:48:d9:
         33:25:99:b9:c5:45:04:a4:bd:2d:a7:bd:06:0e:eb:ec:08:d6:
         55:cc:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----