Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File:                     xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier:          7oeKmIq4n+ZvCdC7pgVPpUlj1hRY2jHWUNRRvDk3GFI=
Subject key identifier:   F2:43:2D:A1:6B:84:11:54:1A:71:0A:F5:A7:81:C5:B4:D6:FC:BA:58
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer:       /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial:       01962F074613DD296931A823E1ED973E6F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number:          0E20
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
                          2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: xFKkpUqeXEuLuLLSLqR92F+B50i9diT09KJMASR5mDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:46:13:dd:29:69:31:a8:23:e1:ed:97:3e:6f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=f2432da16b8411541a710af5a781c5b4d6fcba58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4f:5a:5a:31:b6:77:45:38:24:33:46:27:ed:
                    f1:9c:7e:d3:bd:22:7d:57:cb:1f:03:e4:52:ad:7e:
                    1e:a9:82:33:0b:75:2e:0d:df:31:71:76:1b:23:9c:
                    d4:7e:71:df:6d:d4:d8:46:64:35:f5:f6:e8:77:d6:
                    ff:82:a5:bc:55:2a:53:b0:c2:e8:5f:9f:7a:b4:7b:
                    8a:f1:ef:a9:13:08:1c:6f:64:32:01:b0:b6:37:f8:
                    50:11:d8:58:9f:8b:2a:49:50:84:ff:46:41:1b:d3:
                    62:af:0d:70:0f:19:8c:05:ec:3f:ee:ef:4d:88:4c:
                    2a:2e:b9:89:48:6d:df:aa:5d:07:04:37:f2:d4:45:
                    ec:f9:44:c5:66:22:10:fb:47:dd:b4:5f:2c:9b:0f:
                    49:b7:89:57:69:e2:2a:9e:c7:2c:3a:40:f7:a7:3d:
                    0e:62:9a:c0:f3:b9:8d:e0:ce:3f:51:58:6e:15:5e:
                    4d:ea:cb:2b:52:60:68:ff:5c:dd:30:aa:6b:63:67:
                    a8:c2:3f:25:95:2e:f9:96:2a:d3:a5:89:67:98:a9:
                    9c:42:4c:c4:f5:3c:29:85:75:7d:5f:27:eb:58:ed:
                    e5:bc:5b:0a:48:8f:9e:61:43:65:cf:92:9a:14:6c:
                    7e:0c:6c:0a:16:9e:7e:7b:00:d6:37:23:2f:94:d0:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:2D:A1:6B:84:11:54:1A:71:0A:F5:A7:81:C5:B4:D6:FC:BA:58
            X509v3 Authority Key Identifier:
                keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:21:fb:ae:20:c9:1b:d6:d6:0d:65:55:02:97:74:ae:fa:37:
         71:ab:29:60:b9:c7:51:4b:08:2b:74:ac:ea:cb:e3:87:32:fa:
         08:84:ef:e8:bf:09:25:88:b9:4a:de:a2:38:d4:d3:82:3b:b1:
         a7:37:da:bd:4f:92:65:0e:9b:da:f4:98:29:c7:d2:75:6d:51:
         29:aa:c1:c9:ce:07:32:92:c5:63:5e:70:0e:df:34:e0:6e:bd:
         b6:9a:7f:5c:9c:05:3f:04:c8:65:6d:40:ec:13:11:f1:e5:6b:
         1c:4a:f8:2f:31:f9:3c:18:4e:21:46:c2:7d:f3:c2:98:01:25:
         bc:b7:35:80:2d:ad:3e:45:15:07:9f:42:73:2a:e7:71:7e:96:
         a4:59:e1:89:06:d7:de:02:18:21:c1:ca:55:a3:40:b1:5f:a5:
         63:ba:c2:bb:c6:a7:22:31:91:98:c7:91:3a:34:e4:7e:7e:8f:
         f6:1c:39:71:55:e2:95:d8:42:fb:09:79:b5:93:1e:36:d8:e2:
         e6:fe:19:f9:96:58:4b:90:5d:be:5f:29:05:2f:e4:2e:b6:7e:
         0f:61:df:2d:34:3b:6c:78:42:87:c5:f8:fb:f6:bb:ec:71:37:
         79:42:74:dd:7e:b7:fe:2a:78:a8:18:0a:31:19:d0:27:58:66:
         54:4e:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----