Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
File:                     mXwn0VtG2xhLwCswPIa0fEScG1Q.mft (raw, json)
Hash identifier:          w9ZCs9iCR6SGTJEHW7uwSQiWxmxDMImdJT9p8tl7lec=
Subject key identifier:   00:E6:DE:70:D4:E9:12:5B:D9:86:40:8C:E9:22:57:9D:01:EE:2F:9F
Authority key identifier: 99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54
Certificate issuer:       /CN=997c27d15b46db184bc02b303c86b47c449c1b54
Certificate serial:       01962F072F86C2EFE7C16FF3F990A1314C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft
Manifest number:          0DAF
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: JpZlGPUSnNPcPAQ7HrfbEiiCY90.roa (hash: sj/ySyRWLvZHGTxRHODxTY1XK4NRx1uXT8wwjiiWvG0=)
                          2: mXwn0VtG2xhLwCswPIa0fEScG1Q.crl (hash: EPiuxVFPQ6ulLohtJfoFNjAbWiBcpPRPUgk+9IwJjRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2f:86:c2:ef:e7:c1:6f:f3:f9:90:a1:31:4c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997c27d15b46db184bc02b303c86b47c449c1b54
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=00e6de70d4e9125bd986408ce922579d01ee2f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:2d:06:a7:b2:d8:86:e3:0f:f7:46:fe:2b:
                    db:12:81:ab:ab:f6:82:d5:f6:5b:81:d4:13:11:45:
                    91:72:71:91:cb:76:50:8b:50:62:00:cf:ce:8b:ad:
                    8a:08:6b:fe:1f:29:a1:cf:5d:20:12:11:63:b4:a9:
                    be:9b:aa:71:4b:92:71:d1:55:41:d2:3f:c6:82:11:
                    fa:4f:a1:12:79:98:a0:b9:57:4a:b5:20:f9:c6:b2:
                    01:3e:d4:5e:17:a1:7b:f7:2b:66:80:36:3a:b2:86:
                    26:15:4b:8f:ba:56:c4:ae:08:28:8b:2b:be:f5:86:
                    c1:6a:66:cb:34:f4:3d:bd:e2:29:3a:24:12:3e:ca:
                    be:0a:7e:6a:29:15:c8:cc:2e:56:40:d2:d6:f4:3b:
                    58:0b:35:3c:02:c8:2b:12:e9:11:ad:be:c4:97:a9:
                    98:8b:18:d3:28:24:80:98:af:67:2f:39:6d:46:6d:
                    84:a8:91:a9:3a:32:cd:37:02:dc:37:34:a3:a2:c6:
                    b2:8f:ee:cc:5c:c3:c7:cb:0d:31:a5:28:97:35:19:
                    28:4f:a9:56:ba:b1:2f:a3:23:dd:4e:2d:5d:01:66:
                    d8:b2:87:d7:1d:ef:75:8d:d5:39:1a:61:c9:88:76:
                    61:14:6b:c0:0f:91:0a:41:2e:af:eb:b8:7b:cd:c4:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:DE:70:D4:E9:12:5B:D9:86:40:8C:E9:22:57:9D:01:EE:2F:9F
            X509v3 Authority Key Identifier:
                keyid:99:7C:27:D1:5B:46:DB:18:4B:C0:2B:30:3C:86:B4:7C:44:9C:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXwn0VtG2xhLwCswPIa0fEScG1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5ccbaf-c51d-4e76-a3ee-35ab420173db/1/mXwn0VtG2xhLwCswPIa0fEScG1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:57:dc:45:12:13:93:21:f2:65:11:5c:a9:30:8b:27:87:65:
         52:4a:e6:e8:80:4d:33:b8:55:6e:4d:38:5b:8c:bb:1a:22:23:
         8e:35:7d:64:2f:39:21:fc:aa:06:8c:62:9c:6b:52:14:bb:2d:
         10:f0:19:51:01:d4:05:09:b8:d6:82:47:af:3c:05:6f:1a:20:
         84:59:89:11:03:79:f3:09:8c:1b:15:a1:bc:0e:25:ca:80:fc:
         8b:ee:af:7b:77:d1:3d:8e:83:ef:9f:35:c9:9a:b5:79:ad:c7:
         9f:ad:6a:35:cd:ec:bb:30:c7:b4:6d:44:bd:aa:eb:f5:74:f3:
         7d:85:41:7b:79:e9:85:f3:9f:46:0a:e2:6b:8d:45:8e:7c:d8:
         4a:bc:c1:7b:9b:05:3b:ac:fa:e4:83:95:31:43:01:a7:cc:83:
         07:d9:fb:a7:fb:b3:70:6e:1a:cb:37:f0:1d:6c:36:ab:13:2a:
         5e:b0:3b:86:a2:87:a9:82:0c:6b:d3:aa:7a:bb:1f:5a:d3:b4:
         82:c4:7c:d8:24:07:85:3b:6f:8d:3e:46:98:ed:05:dc:b4:3a:
         9a:83:30:84:9f:4b:5b:14:3a:91:46:97:23:4a:5e:f3:7a:9b:
         bd:7f:61:d6:81:4c:0f:3c:aa:b7:d3:56:07:c8:72:a4:8b:67:
         74:00:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----