Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File:                     xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier:          5uZxhWOZlg/RgLAnut3ZD0XkGkDEdc0/Sx+1/Z5hJlQ=
Subject key identifier:   B2:06:D3:82:70:51:DA:DA:74:C5:80:11:8A:39:E4:93:5D:58:1C:E6
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer:       /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial:       01962F0648B189195395A56173956B4D9081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: Hmr7dkr0W7JFrepttGlqLP6NKbM.roa (hash: yDBwYp9xrxrLaEiVdQGFDv7xOzCGwLdfuFI8YUzQtLo=)
                          2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: RQGJhgZVGlQ4zsZsLXvowwwtt2gh4YK8wCNSIM3ZDXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:48:b1:89:19:53:95:a5:61:73:95:6b:4d:90:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=b206d3827051dada74c580118a39e4935d581ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:be:7c:4c:4f:a5:b0:2a:b4:ce:c4:07:a5:
                    d1:0c:c4:79:48:ec:3a:82:be:85:37:5b:2b:47:00:
                    55:92:03:7e:a0:fb:98:84:25:07:a3:eb:ec:f4:d1:
                    4e:47:31:52:3b:f7:92:0b:45:8d:2a:ff:1a:c5:ad:
                    7d:95:ae:bc:f7:11:78:88:23:c5:d7:be:eb:12:1c:
                    42:34:3e:ac:bb:36:ee:56:52:ae:d7:f7:c9:c4:1e:
                    3f:be:2f:7d:6f:c4:a8:cb:2d:e7:2a:0c:49:4d:a5:
                    25:7c:a8:27:10:ff:c3:29:e2:8a:36:86:d9:40:e9:
                    93:52:c2:20:42:40:1e:16:93:8e:40:31:4b:28:1c:
                    07:92:4b:54:b9:a5:1a:73:5c:c7:f6:ce:e1:af:2f:
                    db:67:6a:4e:31:b7:3d:6e:35:8d:70:6a:f1:21:94:
                    85:10:bd:ff:53:22:e9:36:9e:53:60:69:de:10:73:
                    12:19:b9:97:21:1b:d3:12:d1:f7:10:d4:bd:50:1e:
                    e5:78:df:99:2b:70:af:53:67:f6:4a:d3:6f:c2:dc:
                    38:8a:3c:c5:f1:18:e8:e5:38:26:60:1c:84:a4:88:
                    b0:2b:25:f0:ed:2f:f8:2d:85:55:61:18:86:ea:79:
                    c0:e8:73:96:26:42:4a:74:aa:c0:e8:27:03:a9:1a:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:06:D3:82:70:51:DA:DA:74:C5:80:11:8A:39:E4:93:5D:58:1C:E6
            X509v3 Authority Key Identifier:
                keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d1:10:db:86:1e:11:4b:05:65:36:ea:0a:5c:e7:27:c7:01:
         1b:61:7c:2a:30:13:c1:c3:04:dc:8f:66:00:54:74:08:62:01:
         83:4d:87:d4:f4:c9:79:f7:59:a6:17:18:29:9a:b3:8e:9e:90:
         51:27:36:c1:0b:df:d2:cc:3a:84:0b:94:cb:14:52:34:4f:f4:
         5f:12:d2:5e:13:38:2f:47:3f:05:b2:80:04:51:74:ca:5c:95:
         8c:8c:fc:64:b9:22:73:32:6e:5b:d5:52:b5:2f:e7:71:89:85:
         ec:59:95:cf:8c:18:99:49:df:b6:36:b8:4b:56:89:19:c5:f0:
         23:e1:29:ab:e8:c4:84:2f:84:a2:95:08:af:bb:ef:6e:93:25:
         4e:60:e8:b9:ce:1d:94:d6:24:ea:88:cb:ba:af:17:33:c3:f1:
         99:35:21:c0:d2:ab:67:3a:bd:4a:f2:cc:fe:eb:c7:16:de:08:
         af:4b:d1:b5:cc:6f:fc:63:9a:72:e9:e2:3a:18:0a:c4:aa:8b:
         84:7e:f8:43:39:cc:96:6f:22:cc:13:7d:ad:d8:53:d0:d1:eb:
         8f:a5:57:80:79:1e:37:57:a9:9c:35:fa:b7:fd:54:27:ea:d7:
         69:0e:b6:71:45:03:a6:ba:d1:c9:fc:5d:1a:77:3a:1d:27:65:
         ea:34:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----