Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          8xYFAnsi0YelEbbLXD2JmeQ8HyF9g/qHMj4mAA7S0fs=
Subject key identifier:   4A:4F:2E:3C:20:39:E1:AD:A9:B9:2F:9E:40:E0:58:50:5B:D6:A8:4D
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       01962F74DBCCEEFF5D385251EAC8B6464109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0B04
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
                          2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
                          3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
                          4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: NmtPdb7xf0fFz8zZnAEb20BfzMoY7MfDGCp6hRewK38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:cc:ee:ff:5d:38:52:51:ea:c8:b6:46:41:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=4a4f2e3c2039e1ada9b92f9e40e058505bd6a84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:ef:fd:b5:c4:45:a9:3a:29:88:1f:95:b7:
                    0d:87:62:9d:0a:5f:8d:30:2f:40:90:f6:53:c5:ea:
                    7a:77:9c:e9:07:0c:90:d7:7f:8c:56:e5:61:9f:c3:
                    e4:b8:17:36:b9:39:3d:b6:c6:51:7e:2b:fd:e1:f5:
                    5c:74:f5:74:a2:dc:bb:11:e7:18:cd:e2:34:e6:e7:
                    5d:67:36:30:20:3a:56:ff:70:9c:9f:4a:4d:0e:d5:
                    00:55:11:16:ce:79:ff:a6:55:ae:0f:b4:34:14:f3:
                    2a:18:f9:31:d4:89:d5:72:a7:cf:f9:fb:d2:86:20:
                    21:8b:85:8d:22:0d:86:90:f1:7d:c3:ae:3a:c0:8c:
                    7e:b6:39:0b:f5:ef:1c:0b:7d:04:43:4a:30:ee:83:
                    f6:57:8f:35:fe:a0:a5:64:e4:44:e1:7f:06:62:c7:
                    54:0f:8a:f1:a9:38:41:82:de:36:f3:42:d1:c9:a2:
                    1c:9d:36:2c:fa:14:3c:ab:28:3e:64:a1:9d:68:33:
                    e5:4b:f9:5d:76:2c:48:d6:5a:c3:8a:b9:1f:77:47:
                    17:f2:4d:7b:06:c0:8d:0d:27:d9:a0:f7:89:83:bd:
                    0b:26:7f:eb:9b:ed:25:9c:54:ad:26:bf:c8:31:f0:
                    bf:2c:9b:4d:b8:29:e8:be:b5:7f:d6:b2:0b:6d:04:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:2E:3C:20:39:E1:AD:A9:B9:2F:9E:40:E0:58:50:5B:D6:A8:4D
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:d1:98:cd:df:51:4b:56:79:44:c2:b3:4c:2e:ac:98:1d:
         e8:36:ea:b7:6a:fa:e8:c5:c0:c4:96:30:77:a5:fc:b1:2c:a6:
         04:82:f1:09:af:e4:3b:ad:f0:05:a3:3f:e1:53:b7:57:a9:09:
         29:c3:ca:60:12:98:c8:92:f0:54:bf:ae:ae:0c:8b:02:02:59:
         ea:13:80:3d:47:0d:04:f1:93:ee:c3:1b:bb:1b:b2:8b:1f:e5:
         5b:ec:e6:c7:97:63:ae:35:4e:99:ea:4b:6e:0d:24:3d:f1:99:
         66:90:83:09:7a:52:3e:53:e5:07:c9:e7:ae:f4:f3:d8:35:5f:
         b4:43:c6:92:01:d7:36:77:cd:a6:f5:e6:25:18:eb:66:36:31:
         ca:a0:58:a2:f5:62:e0:0e:53:76:10:67:c5:cb:63:4b:90:93:
         74:f7:bf:02:b9:24:59:a9:bf:be:94:f6:9d:fe:5a:11:c8:df:
         2e:2e:40:2c:74:3f:97:8b:ca:0c:46:43:7b:3c:80:f5:f0:4d:
         55:3f:2f:5d:66:80:42:63:5e:a3:1d:bf:9b:c4:02:5f:3e:84:
         7a:02:c1:46:32:cb:e7:77:f0:e2:a1:28:d9:c2:b7:87:94:83:
         f3:e3:bd:0b:e1:74:dc:54:5f:63:54:9a:b9:c9:50:65:27:57:
         ed:b6:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----