Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File:                     Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier:          PTnWeTtzquRyfB6dIdl+kk3Va1SlEe4Hz7/dLOD9nX4=
Subject key identifier:   D3:FE:EB:12:52:18:86:63:27:CC:A3:1B:7A:34:0E:EF:15:9F:E9:DE
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer:       /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial:       01962E2B0A614FA62FAD310F4CE46DB452AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: Ewsy5BeT6AQb9rN5QlReiqtW1GxJjqovrCOaYjbz1mA=)
                          2: fKufob24rjFmDrGHIRnqnRhk_04.roa (hash: v3safCF9eXY/C1Hr4VINM56t3JBmrqwVep5g+aDbQfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0a:61:4f:a6:2f:ad:31:0f:4c:e4:6d:b4:52:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=d3feeb125218866327cca31b7a340eef159fe9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:f2:51:39:71:82:4c:68:f0:11:86:94:2a:
                    4c:27:db:b9:16:b2:99:ea:3a:75:28:f2:a3:0a:14:
                    74:42:a9:16:07:55:51:86:8e:f5:45:a6:82:7a:f8:
                    52:8c:9f:30:e0:a9:73:a4:c2:60:eb:55:2a:96:cd:
                    8d:9e:e1:91:3b:a9:7d:c0:d5:e5:28:e1:15:e4:c8:
                    e6:a2:54:26:76:67:16:1c:c1:69:6b:5c:d7:52:61:
                    9d:5c:91:e1:bd:6d:f4:63:2c:73:8f:74:cb:9a:41:
                    97:e6:5c:38:f7:96:59:c3:c7:2c:66:8d:8a:1c:7b:
                    df:de:82:d7:b2:32:af:d9:32:c0:65:06:00:b1:31:
                    dc:c6:03:63:08:13:ae:aa:7f:3a:44:fb:1b:3d:3b:
                    88:65:4b:b4:83:40:4f:a6:18:20:da:df:93:db:9c:
                    36:d6:2d:58:a5:c7:71:4d:4c:35:86:f8:be:0a:3d:
                    64:a8:23:ed:6e:c2:98:22:ba:6d:cb:91:bc:f4:0b:
                    54:6f:6e:00:c6:06:e7:a1:c7:8a:70:38:a8:0f:89:
                    e6:7c:07:ab:a2:b3:a8:30:f9:85:06:2a:fe:9e:f8:
                    f7:db:5e:59:41:34:d1:e1:90:63:36:e3:0f:8f:ad:
                    46:27:c3:fe:c0:af:ed:9b:ba:be:de:35:63:49:0c:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:EB:12:52:18:86:63:27:CC:A3:1B:7A:34:0E:EF:15:9F:E9:DE
            X509v3 Authority Key Identifier:
                keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:87:d3:d5:8f:65:d2:a7:ca:aa:d9:3f:2a:4d:9d:2a:97:
         56:17:c9:98:68:4d:dc:6e:ac:56:6d:b0:4d:1b:9a:0b:bb:f1:
         6f:3e:be:f6:14:9b:bf:ab:23:d8:c7:33:92:c6:ee:5f:25:1e:
         e5:91:87:17:1d:f9:1e:20:ff:3e:1e:aa:c1:1d:8e:e2:b9:6b:
         03:69:36:27:3a:95:65:cf:ad:b0:cf:f8:b4:8f:d5:29:f9:b8:
         83:67:04:91:98:86:61:bc:6c:d6:c6:ec:02:96:8b:bd:ef:f6:
         e7:7e:95:9d:67:e2:42:21:6d:d9:e6:58:4e:d1:ac:b2:62:a6:
         92:9c:e0:a7:eb:f5:5d:df:6c:a4:2a:c6:41:55:35:3f:8d:ae:
         9e:8b:ea:d9:2e:f1:48:24:b9:af:f6:df:c7:d6:2c:58:a1:b7:
         8c:ac:a1:41:d8:64:d0:78:8a:d6:9d:18:aa:40:24:6b:f5:4e:
         7c:98:7e:91:95:c9:d8:8a:52:e6:46:5d:f4:56:50:bc:6d:17:
         25:36:cc:1c:a0:91:a3:1f:5d:31:16:bb:79:38:35:e8:d2:7c:
         df:4c:5f:96:ca:f8:9a:2d:a0:c9:cc:35:0f:90:78:55:fc:3a:
         45:53:25:64:85:28:1a:31:3e:b2:3a:13:f4:36:4c:50:12:d3:
         e4:0d:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----