Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
File:                     XKiGCq68SoHT0ibUI4c-M8OICqo.mft (raw, json)
Hash identifier:          7SxMo2Em9CFPL7Ft2gxucdlWipIxTcq3PAzt0BbJCkY=
Subject key identifier:   5A:FC:A7:20:13:81:CC:05:CA:F8:7D:49:0D:4F:6A:4A:30:B7:0E:55
Authority key identifier: 5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
Certificate issuer:       /CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Certificate serial:       01962E98DB3145396AC449D20F15DF367E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: XKiGCq68SoHT0ibUI4c-M8OICqo.crl (hash: aXM+5xGqWktE55c07qNJZYNMHvPE5ReH/gj218ewZy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:db:31:45:39:6a:c4:49:d2:0f:15:df:36:7e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=5afca7201381cc05caf87d490d4f6a4a30b70e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:18:eb:5c:9b:13:70:ac:e8:9e:d8:e0:64:
                    a9:eb:ab:0f:c4:a5:7d:d4:b0:73:11:1e:4d:f8:17:
                    60:a4:a8:7e:6a:dd:5b:e0:6f:0b:f5:a0:46:5c:b9:
                    51:c3:ac:c9:a9:f4:c1:67:12:84:6e:32:bc:f9:c7:
                    1b:33:ce:3e:6f:18:1e:0b:a2:ac:8f:ef:b2:84:fd:
                    00:68:97:8a:ad:78:a9:be:6a:68:73:53:4e:fd:2c:
                    40:1c:51:f8:ec:5a:b4:1c:1a:97:22:ba:dc:ed:5a:
                    16:07:fa:48:83:61:0e:cf:6f:93:fd:a8:bf:36:6a:
                    f5:39:59:f3:13:df:f9:7d:e3:11:6d:66:91:71:0f:
                    03:1c:d9:7c:f5:1b:f1:f8:65:eb:27:72:cb:2d:b7:
                    8a:14:db:5d:76:34:71:87:cc:74:21:6c:46:3a:98:
                    61:30:58:e3:23:01:7d:bf:27:be:73:36:62:a6:ae:
                    ee:30:06:27:74:e2:88:4d:d7:07:82:0c:89:89:81:
                    09:c6:1f:5f:9f:15:90:e9:f0:e6:dd:e0:7c:3a:0f:
                    f5:4c:53:a0:61:5f:25:98:2a:23:ee:a1:64:08:eb:
                    d0:cb:f8:89:15:1e:d8:85:1d:39:97:2d:ab:ea:d7:
                    6d:9d:40:62:7c:d3:69:e4:bf:d7:36:9e:bb:5a:08:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FC:A7:20:13:81:CC:05:CA:F8:7D:49:0D:4F:6A:4A:30:B7:0E:55
            X509v3 Authority Key Identifier:
                keyid:5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:62:d2:32:c5:ff:22:73:f9:3a:ec:12:70:f1:82:0d:c4:
         d8:c7:da:d6:84:87:8e:8f:73:bf:a3:a1:d8:2d:b6:da:4f:b9:
         a0:5f:43:dc:76:15:a4:67:cf:ba:d7:81:de:f5:dd:b3:00:b9:
         13:37:99:34:8d:1c:ee:01:87:02:aa:cc:a8:90:4c:e7:e3:40:
         40:fd:65:38:7e:11:2b:90:2c:7f:22:2a:bb:6d:00:66:93:28:
         45:1f:c6:5d:e3:fe:1b:06:f5:e0:2e:a4:70:7e:87:52:12:7c:
         6a:35:94:7b:08:f1:be:b5:97:1d:e1:97:05:18:3e:ba:dd:05:
         0e:f6:43:42:8e:b7:57:26:53:ef:f7:50:a4:d0:ff:0f:0f:30:
         5a:c7:8f:94:0e:67:68:fa:e9:00:9e:4d:eb:f8:61:81:65:c2:
         ca:be:e0:36:ee:5e:a1:5b:91:c7:e8:18:88:2a:19:6b:b2:50:
         e3:6b:80:d2:11:ce:f1:3d:72:f8:6f:fc:7f:ff:5e:cf:8b:44:
         2f:88:7e:a9:10:b0:b4:95:df:41:e7:a8:45:27:f3:70:9a:55:
         24:f2:93:83:65:d8:1b:b5:7d:a1:28:4c:5f:82:f0:34:6f:da:
         3c:45:51:5c:c0:a0:ad:75:ad:f3:e4:02:f3:11:85:27:d8:61:
         2a:ce:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----