Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File:                     XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier:          TZRaGfuDcPGsIWFJY2LTPr/jhDVJRxGtFoPPYVyXQuQ=
Subject key identifier:   EE:13:9F:FD:34:4D:F4:DD:13:50:13:B6:BD:F6:D3:BE:D6:DE:3D:E0
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer:       /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial:       01962F068503928D7B3A6DDEBA4DA2D8BD36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: F62WfIiTSrMtpYaKvt60lcQtkXw.roa (hash: YJlkN/VgWCfVi9nZv63jvrsBfGYFWAiYVqihH5uZ7es=)
                          2: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
                          3: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: +LxGmieP6QrzQdB7brUefB/kjdZ6qcQZ2BEodmIenK8=)
                          4: g69Pz3CuRumdk71XePj8dM2ccdQ.roa (hash: nnZldHhJmKFU3ji36X9uDUakGmtJCxtFpshmsg3zpfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:85:03:92:8d:7b:3a:6d:de:ba:4d:a2:d8:bd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=ee139ffd344df4dd135013b6bdf6d3bed6de3de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:fb:0e:d9:f8:5e:99:19:70:a7:ee:ba:08:
                    2c:3e:d4:13:7f:cc:e4:fd:e9:4d:0d:6b:ce:da:f4:
                    27:59:dd:10:f9:23:55:dc:b4:6e:03:f6:98:68:40:
                    07:2a:24:22:0e:14:af:ec:35:55:dc:9b:e1:f0:62:
                    80:80:b2:3d:1f:98:5d:17:e6:33:71:fa:e5:c7:3b:
                    44:55:e5:9c:be:ee:e0:58:98:b6:d6:d2:66:26:b2:
                    27:fb:40:dd:ea:22:b8:88:8b:7a:1e:e8:c2:64:b6:
                    e8:36:54:1f:aa:31:86:25:c7:2c:a3:7f:cd:1c:5d:
                    25:4a:ee:b0:4f:30:8b:75:f9:9c:3d:07:d1:ce:0a:
                    9f:08:36:6a:16:ba:8d:9a:4b:48:23:52:d0:90:f6:
                    96:f1:f0:81:05:8d:e0:6c:55:54:ff:1b:8e:90:d7:
                    c5:a8:08:e5:e5:a6:01:fb:be:c5:12:84:e2:bb:09:
                    66:41:1c:3e:71:99:01:12:73:08:6d:00:1b:8a:97:
                    9d:2e:77:70:dc:37:bf:5e:ae:f3:9a:15:e3:66:c0:
                    b2:16:9d:a3:38:05:1d:66:6e:49:e0:9e:1f:a3:e2:
                    94:82:49:df:1e:60:47:d3:6c:19:6e:39:10:92:0f:
                    31:e5:c6:0e:23:de:04:9e:49:8d:29:1f:46:45:64:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:13:9F:FD:34:4D:F4:DD:13:50:13:B6:BD:F6:D3:BE:D6:DE:3D:E0
            X509v3 Authority Key Identifier:
                keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:4c:47:6a:15:7c:1e:e7:5a:67:df:43:8d:c8:ae:1b:c2:
         78:4a:0d:62:bc:22:60:45:47:ad:d9:b0:9c:6c:a0:b6:a8:5b:
         dd:bc:65:c6:19:83:7d:eb:0e:08:2a:a5:ac:6c:ae:50:32:5a:
         02:42:dc:b8:d8:3f:af:79:e4:e5:aa:6d:f9:af:15:bd:5a:ff:
         d0:21:5a:21:21:0d:2a:f2:ac:02:c2:92:50:18:32:5a:be:32:
         a3:84:df:40:43:74:c4:92:d2:9b:ae:5e:a2:b3:e0:66:70:c4:
         b7:aa:99:85:32:88:e6:3f:de:15:20:e1:19:e0:01:f2:e3:05:
         64:67:88:9f:ce:ad:3d:8a:17:ee:d2:f2:dd:1b:06:35:bb:8a:
         67:48:91:85:eb:69:be:aa:8a:73:b9:04:46:08:f0:27:fa:ba:
         94:59:d2:6c:80:82:87:24:d0:8d:b4:1b:48:34:5d:a3:51:04:
         d1:ff:a5:fd:3f:21:d5:48:f7:5a:c1:b0:18:9d:6f:ea:cd:75:
         2f:04:06:54:b9:2e:c2:61:d4:9f:dc:00:3c:1b:f8:64:67:04:
         18:31:37:11:67:45:50:f1:88:65:81:41:67:5c:76:1c:e8:91:
         91:28:ac:7d:d0:8d:a6:00:0b:7c:9e:60:c4:a6:67:f6:0e:72:
         5a:eb:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----