Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File:                     XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier:          2StzIQ8xfWXxvTlj+erJd42jFrLPglSPTPq1XEuHOc0=
Subject key identifier:   A5:AB:55:E7:BE:64:55:7E:4F:7E:72:7C:C2:B2:AD:EC:15:D0:28:20
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer:       /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial:       01962E61A5BE0270014C203EA15E753390DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number:          0442
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
                          2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: DHsEDuxBOh13ZjRH6r/0hT8GeLYbjr1DQSWoi0J2cvY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a5:be:02:70:01:4c:20:3e:a1:5e:75:33:90:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=a5ab55e7be64557e4f7e727cc2b2adec15d02820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:ce:aa:e5:9e:0b:a4:24:e5:74:8d:ee:dd:
                    90:fb:66:de:36:89:df:ee:11:53:a4:05:2e:27:5b:
                    64:cc:cb:4b:93:75:0f:84:dc:e2:7f:65:2a:c4:ac:
                    37:00:98:be:3a:73:41:10:7a:7c:9e:09:b0:6e:72:
                    76:36:5a:f7:7e:cb:3d:e2:96:ba:08:f5:60:43:14:
                    c1:23:bc:9e:80:33:2f:4a:e9:3b:7d:c6:b0:5d:6d:
                    ca:7c:c9:32:c1:b6:7f:33:c6:06:45:66:78:b9:13:
                    ba:03:36:32:4b:d0:52:ec:6b:75:cb:20:f6:0b:d4:
                    52:74:b2:87:c5:52:24:34:aa:98:26:4d:a3:0f:34:
                    01:a7:91:dc:53:ad:43:02:0f:23:58:25:1f:54:c8:
                    90:36:d4:b8:8b:e1:65:ad:81:78:4e:ee:c5:4e:4a:
                    0c:09:ba:44:67:84:11:77:af:85:41:b1:ce:db:9b:
                    f5:00:e1:7a:c3:55:c8:15:fb:b4:39:a1:84:cf:ac:
                    61:f0:56:4e:ab:fc:89:ff:4e:a4:f6:e7:a4:60:45:
                    df:44:74:22:da:ca:95:98:b8:f3:75:70:d1:91:ed:
                    1e:a7:c7:78:65:6b:b9:b8:a5:d4:b1:0d:fa:1e:3e:
                    94:0b:26:10:27:cb:a8:f6:35:32:4e:11:56:bc:49:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:55:E7:BE:64:55:7E:4F:7E:72:7C:C2:B2:AD:EC:15:D0:28:20
            X509v3 Authority Key Identifier:
                keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:83:8c:d8:ff:9a:2a:fc:b3:6d:99:f5:76:43:03:a5:3f:57:
         6a:4b:d3:be:d0:20:a9:95:5b:33:b7:9a:40:c2:bb:39:a3:d9:
         14:2c:12:e6:a8:80:df:19:1d:3d:ce:c9:6d:4d:8d:94:7c:6f:
         41:0e:34:6b:7d:b4:60:8b:d9:b0:37:b6:78:d1:dc:c7:26:53:
         de:b1:a5:ce:61:87:96:d2:ac:41:f6:dc:a7:10:13:a4:08:93:
         c4:ef:b0:97:82:e5:35:34:39:53:26:71:6b:28:36:bd:00:ff:
         35:71:12:e7:77:a1:6f:5e:13:75:00:77:21:8f:5c:9a:a7:a1:
         8b:6e:04:8a:16:7d:0b:88:96:b2:a1:6b:f6:53:6e:7a:ae:0e:
         ad:d1:e4:42:30:ac:1c:f1:61:0f:10:83:61:5e:08:01:33:06:
         1e:a3:c1:36:47:be:8b:09:51:09:80:40:99:d3:42:f5:b8:dd:
         55:c9:35:17:ef:9e:3e:b2:1b:10:1f:b4:be:ee:90:6f:eb:5a:
         ce:7d:fb:54:46:72:41:4b:7b:1a:6f:d5:04:6b:80:d3:34:d6:
         6a:63:af:ec:3c:36:e2:48:bd:17:17:cc:08:e2:7c:d0:2d:bb:
         9c:11:6f:4f:12:1d:b7:36:c9:36:95:36:4f:a0:38:cd:d7:9d:
         f6:d8:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----