Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File:                     xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier:          CUazn8/kQv0XYM4wNoby/GtQRMi0AMKRECrdgRHn7yk=
Subject key identifier:   CF:A8:FA:2C:85:DB:B8:1A:58:1D:6B:95:17:C9:44:CC:42:18:48:07
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer:       /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial:       01962F068EA8D278DC04FCBEBD36450FDD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number:          0D6E
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
                          2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=)
                          3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: 57XU8OX6oDMUV88mB8Sd62Q81Cnm8ieFJfvMnB/tve4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:a8:d2:78:dc:04:fc:be:bd:36:45:0f:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=cfa8fa2c85dbb81a581d6b9517c944cc42184807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:0f:3b:91:02:6d:04:68:ae:cf:11:63:10:
                    f1:97:04:0b:08:14:5c:d8:ba:20:3b:a4:70:61:b7:
                    5c:c9:51:61:29:3c:92:f3:48:df:b9:56:86:08:f5:
                    f9:7b:4d:21:16:6a:7b:cf:4a:9c:69:1f:75:ad:95:
                    db:d9:53:a5:98:51:44:c1:70:67:d7:90:35:fe:2c:
                    70:64:ee:9b:70:1b:72:97:61:27:8c:7e:a2:51:3a:
                    6e:28:8b:e9:0e:1c:21:d8:fe:7e:f4:ba:1e:bc:2e:
                    97:0c:ba:f4:4c:eb:e7:b4:a1:d4:d7:f8:2a:71:0b:
                    66:e3:b4:12:ec:57:e3:12:97:cf:5f:27:62:98:9a:
                    af:c0:e8:2c:e2:f3:7b:9e:05:94:d7:62:c6:78:2b:
                    11:ec:58:84:03:29:32:b6:17:58:d0:b3:f9:cd:b4:
                    62:8e:4a:7e:a2:eb:26:b0:3a:d2:a1:65:4a:89:f5:
                    94:a3:9f:d7:79:6b:c3:14:a3:3b:f6:31:26:01:72:
                    dd:e0:e7:2e:1f:f9:ac:15:0e:e5:e7:9a:ef:17:31:
                    8f:18:01:8c:25:c9:41:1a:b8:3c:af:1d:b0:93:aa:
                    74:70:8b:15:3d:03:e4:e1:74:46:19:3e:c2:b9:7a:
                    a1:f9:de:6a:30:78:6c:8d:43:b4:42:f1:ea:57:b3:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:FA:2C:85:DB:B8:1A:58:1D:6B:95:17:C9:44:CC:42:18:48:07
            X509v3 Authority Key Identifier:
                keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:a4:f6:42:19:7f:b5:cc:a4:8e:23:a5:1d:e9:9a:41:61:
         99:74:b8:95:a0:ca:6b:0f:8d:bf:ca:41:ed:03:d0:77:ac:68:
         9c:6f:e0:b4:6c:3e:5c:af:08:d6:b6:23:f3:ae:57:9f:bc:5c:
         a3:ed:6a:d4:3e:27:e9:8f:49:64:80:61:af:7b:c5:39:45:ff:
         db:91:6c:7e:55:62:0b:64:db:07:e5:4a:ca:bc:bf:22:2e:09:
         c9:f7:92:69:a6:cb:c0:4e:c2:d8:4e:65:08:d0:7f:c2:f0:3b:
         51:0e:1e:68:b4:c5:53:2d:96:f9:31:45:f4:aa:b3:61:c5:0d:
         16:9c:35:5b:8c:87:7f:3e:d7:13:e6:0d:79:16:df:bb:e3:5f:
         b9:2d:b1:0a:9b:a4:f9:97:1f:a3:b2:d4:f9:a9:ad:c4:13:b8:
         f3:9e:7f:48:79:9b:5f:fa:06:1a:3f:df:56:be:ff:3c:1e:43:
         e8:35:30:aa:53:48:9e:bd:80:c9:46:aa:73:ac:6d:b7:2d:ec:
         5c:52:5d:f7:04:61:10:a8:d5:0d:78:d6:db:f9:da:42:55:94:
         2d:e2:12:9b:55:3f:c6:43:bd:b6:e6:e5:00:19:43:2c:0c:3e:
         a4:fa:40:26:8d:fd:52:3b:27:cb:09:47:f0:30:41:47:ec:f4:
         13:fd:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----