Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File:                     xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier:          zuWV5CxwomlJTUYHMS7Nm4C4VkwKCf0DG/aMg51vvng=
Subject key identifier:   25:FE:A7:59:98:7D:0A:83:8A:20:FF:3D:AE:3B:7B:A3:FC:AD:2A:C9
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer:       /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial:       01962F0722E5C8C3F5A89C6F4F6DD1AB9C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number:          053A
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
                          2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: mmx9qE2cBWbBY2GijNCfXbiN019IojHfdmTG6Le8qfI=)
                          3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:e5:c8:c3:f5:a8:9c:6f:4f:6d:d1:ab:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=25fea759987d0a838a20ff3dae3b7ba3fcad2ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:19:77:fa:be:cb:f6:64:4e:ff:69:b1:7a:
                    3c:78:b6:5f:15:2e:c8:d6:79:0a:1d:c7:01:81:bd:
                    88:f3:b0:c9:b0:1b:5d:f7:1a:d6:65:8d:d9:a2:4e:
                    49:6b:ea:14:e3:41:11:1b:b6:08:f9:9b:a9:dd:d5:
                    53:95:a7:40:66:c5:9b:9b:82:89:db:e3:ac:ac:44:
                    ac:36:75:ed:fe:1c:89:e5:0b:e8:4c:60:6d:0b:76:
                    32:f2:09:32:0e:36:bf:d5:4d:30:1e:bc:9d:29:6c:
                    73:98:ee:35:fb:2c:7d:4d:4a:28:13:11:18:51:05:
                    57:43:b9:bf:d1:73:e6:93:5d:c0:14:c4:86:d2:6f:
                    c7:03:a6:77:07:8b:dc:c8:67:2b:77:c8:cf:dc:58:
                    61:36:6b:64:b5:de:4c:d4:85:4b:2e:9d:80:92:5f:
                    51:df:43:f9:fa:a5:6b:b0:af:3b:65:5a:25:62:0a:
                    42:73:4a:e2:3f:14:58:84:f1:0f:6a:89:8a:91:79:
                    a7:18:23:de:84:7d:81:f0:1e:26:f5:a4:b5:ac:cf:
                    6f:1b:2e:a3:b7:2f:04:a0:f9:66:dc:af:cb:45:54:
                    ee:b9:bc:8b:89:8b:f9:a8:92:21:77:66:1c:6d:58:
                    6a:40:5b:89:b1:ec:fb:e9:7b:73:f0:0f:cf:0d:b2:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:A7:59:98:7D:0A:83:8A:20:FF:3D:AE:3B:7B:A3:FC:AD:2A:C9
            X509v3 Authority Key Identifier:
                keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:56:15:f6:6e:bd:96:cf:58:c2:16:2a:6c:b7:1a:c3:04:f2:
         68:fb:96:03:66:58:5f:30:b9:4f:ba:74:ad:a4:0a:f0:99:03:
         92:5c:2e:5f:07:07:fb:5c:bd:19:f1:0a:75:4a:a5:11:c1:77:
         5f:73:bb:12:08:cb:8c:27:bf:5c:0d:34:61:66:00:2a:fe:b6:
         5b:84:68:03:2c:c8:9e:b4:99:32:36:02:12:36:6d:79:65:ab:
         6d:2b:d6:ba:38:f3:f1:23:3b:9a:98:ce:6e:da:40:7e:6a:ee:
         4a:9f:4c:c2:da:fe:41:d7:05:13:06:37:72:b0:2a:a3:57:38:
         c4:3f:4a:74:89:22:3e:57:85:28:37:69:1b:ea:65:54:34:bd:
         5f:02:29:c1:e4:d9:63:e8:36:59:4f:48:d7:76:48:89:8e:e4:
         4f:f7:72:4a:dc:8e:b6:03:f2:a5:b2:29:85:01:91:c4:86:8a:
         4d:70:6c:c2:a0:fd:3b:6e:ae:17:2c:12:e6:98:a7:08:bb:e7:
         48:c2:c7:5e:63:04:a5:f8:ae:7d:84:3f:ec:8b:3c:3e:01:24:
         8d:c8:20:e1:64:3f:db:f2:6c:7b:6a:9b:9f:13:33:10:d7:84:
         22:09:fc:ef:26:4b:31:ab:f7:47:01:14:4a:88:af:e4:d9:04:
         ad:f2:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----