Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
File:                     XTbQLD5qwUds6mipqNgzJw0svz4.mft (raw, json)
Hash identifier:          BT1uO9bUn98LtmWXfYFMWVW/i6aLKLg00hEBCDwCrjs=
Subject key identifier:   A7:49:57:FE:37:58:31:55:56:8B:70:83:4F:83:87:B2:5D:B8:FF:C7
Authority key identifier: 5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E
Certificate issuer:       /CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
Certificate serial:       019547ECBBA317ED82846FD85A8566AFB245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft
Manifest number:          0F1A
Signing time:             Thu 27 Feb 2025 15:00:51 +0000
Manifest this update:     Thu 27 Feb 2025 15:00:51 +0000
Manifest next update:     Fri 28 Feb 2025 15:00:51 +0000
Files and hashes:         1: XTbQLD5qwUds6mipqNgzJw0svz4.crl (hash: 2h6vdNL+tPjLyI5LynJY1VWxvD/sB9KV4RWZornTXOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:ec:bb:a3:17:ed:82:84:6f:d8:5a:85:66:af:b2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d36d02c3e6ac1476cea68a9a8d833270d2cbf3e
        Validity
            Not Before: Feb 27 15:00:51 2025 GMT
            Not After : Feb 28 15:00:51 2025 GMT
        Subject: CN=a74957fe37583155568b70834f8387b25db8ffc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:9f:ea:36:67:ef:87:3a:ca:63:95:90:a4:
                    16:25:fb:e5:44:ac:e9:ac:4c:f3:36:50:28:13:96:
                    df:33:81:f9:b2:58:d7:1c:72:14:a7:b3:a5:65:22:
                    d7:22:44:87:17:26:e8:76:73:ba:14:4a:ea:dd:db:
                    be:d9:fa:2a:e8:94:1d:6b:a5:b3:6f:ff:ee:b0:94:
                    06:2f:14:0f:1f:78:22:95:83:7a:29:6b:49:f9:4d:
                    5f:81:5d:67:7c:0f:f6:e0:a4:c6:b8:3e:66:47:90:
                    42:ec:21:00:58:6f:20:75:39:0e:86:81:3a:db:fb:
                    9c:9d:0b:62:8f:f5:ee:9d:41:11:25:eb:4b:29:27:
                    71:22:5a:dd:db:1a:92:77:41:2f:32:e1:16:23:36:
                    5a:09:97:c5:ee:1c:a7:1a:f2:eb:d6:41:f8:28:da:
                    7d:48:15:cd:21:7d:5d:48:b0:4e:36:2d:0a:03:6a:
                    b3:a4:ba:dd:ec:05:c9:5a:e5:23:71:a0:e4:d4:ed:
                    c4:4f:dc:62:84:a5:e3:39:ef:2f:f9:f4:f7:a4:29:
                    70:06:08:15:4a:95:a4:2a:93:bd:46:0a:17:e3:92:
                    6c:20:0d:86:c0:1d:96:97:8e:61:75:46:e0:97:e0:
                    81:f7:0b:d4:a0:1c:74:65:8e:cd:7a:81:d9:81:a8:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:49:57:FE:37:58:31:55:56:8B:70:83:4F:83:87:B2:5D:B8:FF:C7
            X509v3 Authority Key Identifier:
                keyid:5D:36:D0:2C:3E:6A:C1:47:6C:EA:68:A9:A8:D8:33:27:0D:2C:BF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTbQLD5qwUds6mipqNgzJw0svz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4a89cb-12e9-4ddd-a02f-9166657c7d9f/1/XTbQLD5qwUds6mipqNgzJw0svz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:64:2b:d1:c7:06:27:00:71:36:71:47:0c:ae:3e:9f:d3:bb:
         97:39:13:1f:b9:48:57:9e:4e:79:64:88:0e:25:f6:47:4d:3a:
         bd:4f:1b:5c:74:df:69:64:dc:ef:4c:df:3a:f5:5a:c9:34:dc:
         0c:89:62:17:c9:44:b5:86:3d:f5:81:22:c6:13:e6:2a:cc:d9:
         63:4b:7b:e6:73:a1:4b:33:35:c3:97:31:95:fe:d1:22:c3:a4:
         84:89:20:e2:fe:d0:94:59:9a:a7:c5:ee:2d:d4:de:e7:cc:fa:
         c6:94:33:ae:ee:ba:f1:31:04:eb:97:39:56:11:c4:3a:18:c0:
         5c:20:63:dc:06:43:6c:70:a2:42:39:06:ff:dc:7f:89:ed:e8:
         23:30:b6:54:0f:f8:c0:64:44:10:d0:be:cf:9a:aa:8d:01:47:
         48:e7:c8:5f:20:40:28:9b:9c:62:18:12:c8:75:83:f6:6b:51:
         a3:39:52:8e:0f:1c:e7:58:b1:c3:bb:9c:37:84:03:e7:d4:b9:
         49:94:37:f8:4c:fc:63:01:d9:e5:60:81:7e:55:47:2c:98:7b:
         82:16:61:8f:07:b9:b2:ac:cf:da:38:29:9f:ec:5b:bd:f4:77:
         40:6b:ae:38:d0:38:a7:5e:44:9d:ed:53:ad:49:00:bf:f4:43:
         d3:c9:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----