Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File:                     XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier:          NnVHNLAabd2/wjXC32lINGWhwVzTvpOyozVlZpfgYC0=
Subject key identifier:   E8:9F:D1:3F:4E:E1:0C:F2:2D:BA:32:0A:81:BE:30:ED:0A:78:51:51
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer:       /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial:       01962E993399FB262203D59C281F728BB163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number:          0880
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
                          2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
                          3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
                          4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: L0wvo7UC6n+Ypk5XOeFNi6ACiB9SOkmbRvF7V6fG+k8=)
                          5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
                          6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
                          7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
                          8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:99:fb:26:22:03:d5:9c:28:1f:72:8b:b1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=e89fd13f4ee10cf22dba320a81be30ed0a785151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:6d:0c:28:8c:a1:3a:1d:4b:4a:4a:fd:1c:
                    d9:e9:4c:17:51:e3:7f:51:67:42:f5:a3:4f:37:e4:
                    b9:d7:fe:7d:d7:20:fd:64:ea:9f:35:63:ad:f1:1e:
                    a9:24:97:cd:2a:7a:d2:39:8d:84:30:a3:f2:f6:e0:
                    24:e5:5f:82:f2:7c:60:05:53:7c:f0:2e:86:7a:c1:
                    89:21:19:44:c0:33:45:d6:a6:6e:79:a7:7d:bb:76:
                    97:4a:a0:ed:4b:ca:c6:1a:41:9e:4f:f5:fc:a9:77:
                    4a:38:19:68:17:e0:4c:d5:53:24:90:26:fa:0a:3e:
                    8e:35:ce:a5:ed:20:46:db:2e:82:43:9e:0e:1d:72:
                    2e:10:4d:f8:f3:46:7c:83:95:f2:f7:42:ef:a1:be:
                    1f:25:8e:6a:45:a0:52:89:11:cb:3e:08:e4:9e:1e:
                    00:d7:ed:3d:5c:44:dc:51:a6:bb:a3:44:47:e8:5f:
                    ce:da:23:82:f2:6c:f3:06:ae:0e:3d:4c:9c:28:1f:
                    43:1f:9a:e5:15:2f:3a:37:26:b4:9d:79:b2:bc:b7:
                    9b:56:75:25:73:f1:85:19:ce:de:28:d2:c8:80:25:
                    b9:3d:10:d6:42:ea:31:11:0e:67:ea:fa:8f:72:74:
                    65:0b:63:92:79:aa:ff:17:3b:56:bc:cd:f4:98:6a:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:D1:3F:4E:E1:0C:F2:2D:BA:32:0A:81:BE:30:ED:0A:78:51:51
            X509v3 Authority Key Identifier:
                keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c3:53:d1:33:2d:39:19:d4:68:75:8e:6a:00:bc:71:50:9c:
         f6:7d:7e:b5:18:f3:79:12:ae:db:aa:2b:91:70:07:82:58:a9:
         0e:64:8a:ab:f5:be:10:20:c0:c0:c2:38:fe:05:d1:5b:4c:3d:
         26:9b:03:d4:79:69:99:86:e4:ab:9f:7c:80:95:23:72:62:21:
         dd:e2:c6:ba:7f:d1:45:1d:8b:67:a1:ed:cb:cd:c1:2b:14:58:
         7c:21:4a:86:30:d2:10:8f:60:42:a0:c7:bd:ee:de:14:29:10:
         d7:5f:e6:71:15:6a:50:57:0e:7c:0f:bb:0e:5e:2e:98:00:f9:
         3f:27:09:97:15:5b:2e:ec:aa:0a:00:b9:f7:5d:46:49:27:7a:
         59:62:84:0a:b0:ab:04:ac:cd:22:e3:62:91:da:c5:69:64:f2:
         13:b8:60:c1:88:6e:e3:b7:72:36:8c:a5:60:8a:97:18:d6:c1:
         81:12:81:12:40:e7:5b:4c:c9:cb:8b:af:bc:8d:67:6d:ae:b9:
         f9:34:a0:6a:33:98:6f:36:2a:23:07:1b:ab:09:0b:b9:70:e3:
         4a:fc:49:45:11:06:7d:a0:a2:b2:ae:e4:d1:0e:80:2f:0a:b9:
         b1:7c:7f:af:aa:55:17:40:28:0d:26:6f:f6:dc:cf:e3:fd:d4:
         90:c4:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----