Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File:                     XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier:          bzstIYIDvQXEjf0JRyi7kSANHiuE4X0uqsjAWA3BOLs=
Subject key identifier:   1C:2B:9B:24:23:F7:29:3D:2E:AC:92:65:74:E9:86:0C:A7:FD:73:8C
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer:       /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial:       01962F0683E8E4ACDC89709547DA7BFF0FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
                          2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: B0prgSBauhEhHQktNPssYeg7+OtQg/gZ0fQ3peNCHVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:e8:e4:ac:dc:89:70:95:47:da:7b:ff:0f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=1c2b9b2423f7293d2eac926574e9860ca7fd738c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:c4:90:4b:74:78:48:63:5b:bc:66:8f:e8:
                    dd:bb:13:be:14:d7:9d:a9:4e:79:99:4b:02:0f:a6:
                    9e:fe:da:b9:fc:66:0e:ff:d9:97:3c:e6:57:e8:4f:
                    e6:33:d9:f2:cb:62:1c:7d:2d:97:86:64:d6:af:d5:
                    72:4c:8d:f3:e2:3b:30:75:26:5a:56:84:e8:da:b8:
                    7c:db:ad:60:c8:e9:a9:97:67:ea:46:73:e9:b7:f8:
                    8a:61:69:d3:d0:21:81:29:31:69:97:d7:27:8b:2d:
                    27:6d:53:0d:92:42:4f:09:bd:b9:30:d4:eb:c0:42:
                    72:8f:43:91:ac:d2:96:96:0d:18:cc:ac:a0:3d:66:
                    c1:fe:c0:92:8d:ac:fe:6a:1f:84:e5:3b:73:00:64:
                    23:21:40:f0:df:b5:a9:d8:07:2f:2e:c5:1d:79:1c:
                    e6:40:10:98:3a:c6:57:0a:76:5f:1b:60:cd:66:8c:
                    9b:2a:6e:21:8d:d3:ed:3b:86:a1:f1:18:c3:71:41:
                    e4:e1:fa:4f:bc:71:d2:85:bf:bc:4c:88:a1:86:21:
                    6c:1d:a3:e0:dd:7d:69:b3:56:97:be:15:ee:ea:52:
                    25:3d:5a:f8:b4:2b:e3:25:d9:6d:45:be:93:f6:11:
                    f9:09:39:9d:65:86:af:37:ce:48:87:dc:f6:b8:ea:
                    d0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2B:9B:24:23:F7:29:3D:2E:AC:92:65:74:E9:86:0C:A7:FD:73:8C
            X509v3 Authority Key Identifier:
                keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:65:57:15:43:b4:11:c1:95:01:85:62:a8:59:ae:a7:95:b6:
         0b:76:66:29:06:65:bd:a2:ad:e9:35:1b:cb:4a:ec:bb:52:a1:
         54:b3:be:1a:01:d8:42:a2:01:f7:6f:e0:94:5b:4b:f9:a3:be:
         e6:50:63:b8:82:77:2e:e2:e9:31:93:d6:0e:fc:ee:7f:5d:e7:
         e2:32:b9:cc:76:03:3f:ea:3e:b5:41:d4:f9:60:5a:15:d1:9b:
         42:e8:e9:d2:7c:7f:ac:6c:36:70:5a:17:12:ac:a3:ab:af:07:
         fa:5f:5b:bc:0a:ab:ba:db:2f:27:c5:0c:20:94:39:82:30:65:
         54:6f:d5:60:d8:88:80:59:74:8f:f5:df:ac:ac:2d:26:c0:2a:
         2b:c0:6c:f1:7e:f3:09:6e:b5:e3:1b:27:44:7c:b8:78:7a:e3:
         6b:6b:55:24:58:da:23:4f:79:d5:d7:d7:03:6e:b4:33:bf:33:
         12:34:f8:9e:04:fe:f4:0e:1a:80:fe:14:50:cf:1b:e2:f3:5f:
         b1:b0:1f:ca:93:f8:49:1f:88:be:32:ea:68:d0:73:a4:7f:99:
         b3:21:f5:9d:df:b2:44:11:cb:ea:df:d6:d4:da:4d:e8:ec:ab:
         1b:37:5e:37:aa:76:38:a0:69:18:35:fc:30:57:2d:4c:15:d1:
         cb:14:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----