Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File:                     XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier:          ntqIdjmgUxiDLHpSHpvdiOppB8V2iWd2WvF6iI3ZebQ=
Subject key identifier:   CA:DB:81:6D:7D:5D:AE:6A:CF:E4:26:88:90:AD:17:EF:C7:92:AF:1D
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer:       /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial:       01962E2AC07AC041D494F3A6E113506BED39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
                          2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
                          3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: b59HkjiLFpKkXxzT/R6F2SRnSoxppNyFcgZy10N2VHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c0:7a:c0:41:d4:94:f3:a6:e1:13:50:6b:ed:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=cadb816d7d5dae6acfe4268890ad17efc792af1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:ff:d9:f4:be:bb:c7:cb:db:ff:5c:35:f4:
                    7b:03:29:48:73:d6:70:91:d6:f9:4a:b5:f4:64:e5:
                    a2:5e:e5:5f:32:9f:c5:52:87:5f:a3:15:91:97:94:
                    03:f6:29:53:47:05:8b:82:b4:30:d0:2f:a2:14:a6:
                    e2:f6:0c:f5:e5:7f:14:c3:2e:49:37:3e:bc:ec:3c:
                    5f:a0:94:a4:98:10:7d:e4:3a:43:0f:2c:24:f7:51:
                    25:f6:5e:1d:6c:88:b3:67:8b:ab:fb:08:45:95:10:
                    5b:b1:ae:b7:12:a2:20:b4:2d:db:df:a6:a4:04:48:
                    53:a6:86:f0:a3:0e:ec:6e:3b:1a:f4:70:03:d9:5e:
                    cf:e5:d9:fd:7b:50:bc:f1:1f:02:e6:27:4f:99:45:
                    e6:e9:aa:cd:e8:33:6d:7d:1e:9d:ae:69:b6:dc:b5:
                    76:fb:a9:fc:93:55:ca:28:95:41:ba:6a:a9:ee:87:
                    49:67:16:7c:cf:23:7c:cc:e6:a6:12:da:18:cd:ce:
                    e1:f8:32:92:65:7e:8f:47:59:7a:57:88:0c:57:2f:
                    f8:9d:b3:ff:c0:ea:7d:11:59:87:fe:7a:df:40:41:
                    6f:23:9a:11:b8:0e:c9:80:10:4f:7c:c0:43:67:4a:
                    32:3a:bc:89:45:e3:91:4c:68:72:8f:f3:fe:2f:c9:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DB:81:6D:7D:5D:AE:6A:CF:E4:26:88:90:AD:17:EF:C7:92:AF:1D
            X509v3 Authority Key Identifier:
                keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:51:4b:a3:ac:66:41:fe:08:81:a9:63:49:ec:2d:25:a7:94:
         b7:59:da:af:81:74:52:ef:54:74:09:f8:8a:18:72:0a:87:82:
         0a:4e:42:ec:96:de:15:51:84:a6:e9:fd:40:5e:f7:db:71:99:
         28:c6:88:bb:ff:cb:71:7f:cd:ec:81:18:88:b7:2b:1d:44:b2:
         cc:6c:c7:56:14:c3:f8:79:6f:c1:a2:66:4e:e9:b0:2b:11:4e:
         90:73:41:1c:8f:86:df:7e:4c:af:f7:e1:37:a8:83:df:83:71:
         2b:e3:c9:c9:cb:e7:df:ec:e0:96:3d:50:9a:9f:5b:ca:ea:6d:
         91:90:0e:2d:47:c1:32:24:d2:21:65:27:9a:d4:ca:21:a2:f9:
         83:e6:28:5a:6a:c0:d6:36:c6:20:41:31:04:ae:8e:73:22:68:
         e0:cc:af:2f:d8:8d:e6:67:c4:0e:fe:3d:38:57:34:80:82:d5:
         2f:fe:cf:63:c1:06:8d:05:fc:2f:7c:5b:33:65:ae:c4:63:ef:
         48:0c:cf:06:e5:29:d1:82:8f:35:15:3a:bf:33:06:96:a7:4f:
         d0:10:ba:76:c3:63:a8:e9:9e:13:c9:3c:f2:99:8a:9f:bf:3e:
         72:30:4a:d1:fb:e1:ba:d1:67:d7:77:e9:c5:8e:2f:8e:9c:bb:
         7c:57:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----