Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File:                     Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier:          3lcvxVpD3H8ctiTvbdteB7pRjJbemeW8ckCmqJ6GVds=
Subject key identifier:   58:72:84:6A:82:FA:11:C5:23:40:5B:B6:36:0F:95:06:70:F6:27:08
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer:       /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial:       01962E61D6BDF9C0F43F1F20FDE1CA542E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number:          0DA7
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
                          2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: MUxteyXs6pvCDywSiJrrvRRgxyWz7CNaqJjZziAQZkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:bd:f9:c0:f4:3f:1f:20:fd:e1:ca:54:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=5872846a82fa11c523405bb6360f950670f62708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:46:c1:f9:cf:2d:ff:2f:98:d9:f4:51:b2:
                    88:27:a6:e9:2b:7c:93:f9:95:da:60:4c:25:d1:7e:
                    02:7d:67:60:b1:8e:e8:20:cf:75:dc:07:f3:40:f8:
                    70:c5:39:31:53:3a:73:6c:f8:e1:fa:c2:4f:ad:a3:
                    32:ba:f3:43:0d:0e:c5:e1:c0:ce:71:50:5b:e1:a6:
                    87:26:e2:91:fe:24:1d:50:25:5c:a3:2a:ea:76:10:
                    a9:c5:18:19:14:4f:75:f2:72:32:15:be:4f:fd:c6:
                    9f:ae:40:2e:4b:82:35:ac:2a:6d:b8:cc:bc:8f:79:
                    ad:02:99:a9:67:dc:ef:1e:ae:d7:ee:84:bb:ee:5b:
                    bc:a3:f6:05:3a:50:06:b2:ea:b3:fd:e2:fd:e6:b0:
                    27:ff:70:3e:b9:ea:eb:02:3a:d7:8d:fa:e7:cd:c3:
                    bd:91:8e:e5:3c:79:fd:a0:33:e8:d7:e9:ca:d6:6c:
                    0e:26:aa:20:c3:37:62:6b:ba:37:01:de:5d:60:e4:
                    a9:00:24:ed:ff:8a:b8:88:ae:96:f0:5d:d6:b9:10:
                    cd:e4:4b:2d:7f:c1:ec:4f:ee:9c:34:6e:38:2d:90:
                    ec:97:b2:0a:70:73:3e:ae:c5:01:0c:82:82:79:e6:
                    14:89:81:ec:36:3d:1a:94:2d:07:45:fd:62:7b:bb:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:72:84:6A:82:FA:11:C5:23:40:5B:B6:36:0F:95:06:70:F6:27:08
            X509v3 Authority Key Identifier:
                keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:6f:32:51:28:b4:ab:3a:2c:2d:15:c4:83:97:cd:7e:c1:
         c5:08:4b:00:5f:ab:78:4a:78:78:07:ee:48:f8:df:ff:62:7f:
         dd:13:ef:c0:b9:5b:eb:94:88:ff:51:7e:7c:81:96:38:ab:35:
         c9:96:3c:8e:8c:3d:c1:24:a8:2c:2a:da:82:db:23:68:e8:09:
         0d:15:19:c1:2a:0d:03:71:91:de:b5:de:64:ee:8c:a3:71:14:
         0a:43:e4:48:02:be:3a:db:9e:f1:49:c5:b9:be:4d:1b:11:32:
         f8:79:15:08:33:1c:0e:a1:76:de:49:bb:36:cd:71:f9:e4:ac:
         e3:11:35:8e:1c:12:b8:f6:db:50:d8:ca:14:9d:5b:00:95:c3:
         67:d0:42:08:2d:08:d0:ea:88:4b:8a:d3:a4:0b:20:9f:d6:31:
         44:dd:c2:70:56:1d:99:17:53:32:95:a6:36:3e:70:dc:71:01:
         13:4d:fb:d1:69:e0:11:c6:b8:b7:58:26:ac:21:b4:1f:98:c1:
         66:5b:cb:71:ef:e4:62:9c:7b:a5:3b:ee:c0:82:54:fa:18:ca:
         55:c8:b1:c5:2f:a2:c3:9a:7b:c5:12:99:4c:45:cd:7b:bb:ef:
         57:f1:d2:aa:0d:9f:84:1c:f5:06:eb:82:8f:18:04:35:37:07:
         2a:f5:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----