Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File:                     XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier:          olPzpu8O7jXi3TFeibfgLUqBPDdoGHgsDidfUsnKj44=
Subject key identifier:   95:92:F6:3D:88:68:5C:39:81:8F:80:9E:89:A2:49:4D:78:C0:79:56
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer:       /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial:       01962E9883C4293342699A01468B1EED2290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: uMB3q/wLc989Bw5AxaZnZ2BmCPCwhNZHw7Jg4Dr25jQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:83:c4:29:33:42:69:9a:01:46:8b:1e:ed:22:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=9592f63d88685c39818f809e89a2494d78c07956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:3b:c0:18:aa:0e:f0:6d:38:9a:e0:f7:df:
                    be:6c:06:3b:10:21:fd:7a:5c:7b:63:75:22:d9:e5:
                    1f:f0:70:fb:be:84:64:a6:51:f7:ae:2b:82:26:05:
                    83:d2:a3:42:a0:9c:61:66:d6:f7:65:6f:0f:17:94:
                    93:15:8e:cc:ad:96:cc:a6:48:f3:62:9d:31:71:41:
                    74:ef:8e:eb:48:a3:bb:3c:9c:d9:6f:50:b8:52:de:
                    cb:69:94:d7:91:d0:68:03:f3:63:f7:3f:0b:57:72:
                    b4:48:62:3c:f0:02:88:f3:a4:43:33:83:0d:8d:d5:
                    d6:3c:62:e2:86:43:1e:ac:ee:ae:5a:8d:0a:ce:d4:
                    f1:83:0f:05:30:ae:b2:cf:55:f7:98:42:2e:bb:76:
                    e5:d2:dd:cc:e3:fc:f0:a9:a3:72:e6:fb:60:23:03:
                    e8:60:86:72:e7:0b:76:ae:82:64:8f:7b:1a:6e:94:
                    da:e7:36:8f:86:c3:61:a5:7d:d9:38:d6:7c:7e:cc:
                    0e:b5:5b:7d:a6:25:62:0d:f4:38:62:a5:b3:c9:4e:
                    2e:57:29:97:57:4f:12:19:6d:7c:9c:56:0b:d0:b1:
                    d8:07:dc:3e:dc:bd:14:ce:b7:f1:5d:1e:11:8b:bb:
                    73:c2:6a:df:12:94:43:5e:82:03:29:61:40:11:65:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:F6:3D:88:68:5C:39:81:8F:80:9E:89:A2:49:4D:78:C0:79:56
            X509v3 Authority Key Identifier:
                keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:64:53:97:c9:b4:e5:44:6f:b0:e3:eb:a1:fa:5d:d0:6e:72:
         01:30:ef:7a:33:c6:65:4c:6a:2a:6d:8a:df:da:f7:7b:70:24:
         5c:50:63:2e:d9:52:97:b6:78:f7:ee:79:6a:5f:67:c5:23:c5:
         1f:ec:c4:c9:d7:5f:22:dd:f9:c6:9a:05:8c:5a:63:33:33:40:
         7d:de:c0:45:74:28:6f:e3:d1:18:95:ba:dd:6c:a1:bf:55:8c:
         3d:fb:5c:95:21:d6:21:bf:0a:b1:b5:b4:4c:ec:53:72:39:bd:
         1c:4b:32:50:d7:a5:e5:18:06:93:f7:c0:5d:cb:3a:f5:45:51:
         8e:ed:0f:45:78:32:cc:23:36:f6:a3:a8:bc:b9:f9:ec:35:b1:
         6e:41:60:49:2a:39:ed:2c:04:c2:65:48:33:07:98:89:a5:56:
         31:c7:ed:e0:c1:d7:d3:4c:84:b4:77:9e:6b:61:34:cd:15:7b:
         80:1f:62:32:79:b4:1c:bb:e7:72:e4:58:0b:5d:2a:34:66:a8:
         b6:4e:77:5c:0c:33:6e:cd:b7:f9:df:64:98:de:f9:b1:73:db:
         ed:58:54:3c:d4:ed:9b:e1:ee:1b:2a:1e:03:36:8f:16:59:3e:
         f3:bb:36:76:e1:0d:12:46:97:a2:13:c3:29:83:ee:ec:dc:da:
         61:7f:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----