Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File:                     Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier:          5Gk+nqkAXS4z4mgCwn1eYvSodG3j92LLfgiky21F5CE=
Subject key identifier:   35:8E:73:8C:DA:C0:08:81:72:E1:A5:8F:F7:D0:DE:B8:04:57:A9:4B
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer:       /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial:       01962F06DB467BE6CC3D11DF8644E69ED936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number:          0EB8
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: wYRNOYTi2fd/xISTU/8U/880hHSA/ovQvM2kKrqg3xU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:46:7b:e6:cc:3d:11:df:86:44:e6:9e:d9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=358e738cdac0088172e1a58ff7d0deb80457a94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:ea:5b:9e:f5:68:f3:e1:34:73:31:d8:72:
                    e5:55:1e:4c:88:cc:53:69:cc:fb:f8:70:5b:83:ea:
                    7f:cd:1d:f9:b6:9a:aa:6b:19:21:fe:89:71:47:bd:
                    09:a4:5b:76:3b:a1:c8:56:49:6d:b0:c4:a8:1c:e1:
                    13:15:8f:7c:94:8c:fb:7d:f6:d1:8f:aa:8b:5c:23:
                    b2:99:bc:04:d6:d9:2e:ca:86:e4:71:e8:fe:a0:64:
                    69:17:6d:3c:58:0a:50:e5:b7:58:bd:65:e2:99:53:
                    49:d2:a5:c3:1e:7e:6f:8f:e9:4a:37:e5:93:77:d4:
                    65:9a:ab:94:6a:8a:bd:a7:7e:2b:5f:52:45:a7:10:
                    74:66:e7:69:05:5e:39:ad:ee:6b:c9:a2:bd:da:4d:
                    34:80:16:52:bc:dc:ea:82:43:6e:ef:8f:de:66:6a:
                    c0:b3:2b:56:4d:c6:92:1e:f4:2a:f6:2e:40:72:c7:
                    34:e3:66:d1:9d:44:cb:31:3f:59:fe:07:0c:a0:1c:
                    f4:60:39:44:f2:1f:9c:de:ec:79:cf:63:3e:a0:ee:
                    3d:95:a3:de:3e:04:2b:23:d1:b6:d1:3f:a4:32:0e:
                    22:27:75:6f:79:27:a4:9e:02:8d:8e:37:55:b4:49:
                    92:1a:d2:79:d6:53:6b:52:b2:be:a9:09:e3:5a:ad:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:73:8C:DA:C0:08:81:72:E1:A5:8F:F7:D0:DE:B8:04:57:A9:4B
            X509v3 Authority Key Identifier:
                keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:71:bf:7a:ed:e4:b9:3b:ae:02:3e:08:f9:7f:60:e1:df:
         56:3f:eb:c5:ad:c5:78:57:63:1b:db:5a:d6:bc:4c:05:b3:ce:
         9d:8c:aa:74:9b:ba:19:42:71:46:b0:7e:2e:f2:59:e9:cd:c7:
         94:fb:c6:34:7b:70:1c:37:ba:d6:be:cf:b6:4a:7f:7f:01:fc:
         60:21:32:8f:00:7f:c6:da:cf:29:74:5b:11:af:66:06:7d:24:
         ac:5f:3d:b4:d0:88:4a:59:47:69:fe:d1:2d:00:81:12:99:12:
         6e:9c:b7:ac:89:29:ca:22:ea:a9:8a:65:b1:9d:d3:8b:4b:28:
         08:f5:ec:2a:b0:9c:25:d3:ea:24:4f:d3:94:43:b7:ef:26:4a:
         bf:ba:e0:5a:2a:f7:1e:9b:3d:4e:6b:27:97:af:fc:84:2b:47:
         63:36:59:74:dc:2e:4b:d4:11:4a:52:d9:ca:52:bd:f2:a5:91:
         8f:da:0a:06:76:8a:77:6e:e7:dc:a7:ce:e6:9d:d7:fd:61:51:
         d0:0b:c1:34:30:9d:72:2d:bb:a0:ee:96:d5:7c:af:d5:17:c3:
         ce:9a:1b:30:24:73:cd:74:f2:fb:4d:a3:91:4a:ad:25:52:03:
         4f:a5:af:95:53:22:1a:5d:ea:7c:63:38:5e:b4:f3:7e:15:42:
         93:d9:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----