Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File:                     xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier:          sC9Oqf6VcDRELPvc+CU+U+lbvWh/vtSqDWThbYM+LVI=
Subject key identifier:   2D:14:EB:10:30:26:88:AA:A3:95:6B:8F:9F:42:D1:1E:28:98:CA:E1
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer:       /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial:       01962E99406846284B885C31C7F3086810C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number:          1203
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
                          2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
                          3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: Rb64ZCF5zK/PVPEzgk7sI9mJDLrsxKsSHdsow0JsBt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:68:46:28:4b:88:5c:31:c7:f3:08:68:10:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=2d14eb10302688aaa3956b8f9f42d11e2898cae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:c9:58:2f:98:6e:c2:a8:05:99:47:37:21:
                    0c:09:58:a1:a4:fa:c5:46:1b:4a:c7:ad:35:f6:72:
                    9d:44:ce:b5:2f:2e:c8:95:3f:bd:ed:39:98:7b:06:
                    61:75:0d:bc:62:9b:87:1c:ac:4c:1d:39:47:64:7c:
                    27:5c:18:3b:26:00:f4:46:02:b8:0a:fc:88:16:4d:
                    e8:e4:05:04:00:48:92:5f:ec:a7:4d:69:4b:fc:d2:
                    f6:1e:ad:b3:22:2b:89:f0:9c:97:80:74:ad:4d:d9:
                    d3:04:e8:0a:5a:5c:da:cf:0f:a0:e8:b2:23:d9:ad:
                    01:f2:05:bf:94:81:42:71:44:84:e2:64:b6:64:09:
                    df:af:b1:54:3a:e5:78:d0:ef:83:ad:76:8a:77:fe:
                    65:41:56:ee:c2:af:02:ad:92:80:de:78:4d:bd:d2:
                    95:d5:ba:cc:46:6a:9b:8e:fc:c7:cb:37:b6:59:a5:
                    91:af:b9:29:01:1e:63:cd:bf:c5:41:65:ce:96:7d:
                    94:80:5c:97:9b:fc:8c:d2:9e:01:fd:bd:65:80:df:
                    86:8f:38:9d:89:b1:19:e5:e5:9d:2a:30:f8:52:80:
                    04:38:48:cb:1d:79:d4:5a:7e:b8:fc:a6:df:27:a7:
                    18:68:4f:11:ab:dd:5e:d5:8d:0c:d1:33:4c:02:44:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:14:EB:10:30:26:88:AA:A3:95:6B:8F:9F:42:D1:1E:28:98:CA:E1
            X509v3 Authority Key Identifier:
                keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:26:f6:43:e3:8e:2b:29:ff:d5:89:48:ef:2c:ee:d8:11:39:
         c6:c6:ea:93:a0:c8:92:cb:78:38:c9:1c:52:c6:5f:f1:fe:44:
         1b:b1:69:da:88:46:2b:95:65:6b:7e:03:db:95:ec:82:79:68:
         7a:cb:a8:7b:83:9b:6b:0b:57:ee:51:3a:24:55:d3:d3:fe:9b:
         f9:79:68:64:31:5c:f0:0f:20:6f:a2:02:90:54:ec:50:a5:1c:
         90:d8:03:e2:b4:72:7b:0b:33:30:42:e8:a4:ec:a1:98:c1:04:
         ab:3d:01:5e:de:e6:48:a4:b2:30:45:ea:da:76:7c:ce:69:fa:
         a1:ae:72:c1:1c:18:4b:7e:c3:cd:ad:e3:4f:e2:6a:9d:10:de:
         4a:0c:14:ef:5a:9a:28:e8:06:61:4d:64:5f:c3:77:c7:c5:42:
         2b:2e:2f:cc:c0:6c:4e:65:72:32:ae:d3:d1:fe:fb:fe:34:95:
         51:83:7a:83:47:fa:9c:ba:63:e3:db:2c:ee:f9:f3:c1:67:da:
         e3:cc:e3:bf:01:ae:5c:18:35:e1:be:e9:44:52:c7:b6:f8:ad:
         73:55:bc:71:ca:f7:bd:83:b2:b8:02:25:f2:b8:28:eb:a1:91:
         47:f1:b0:6d:f0:3b:d5:60:18:df:08:41:85:14:65:4c:a6:6f:
         c9:9c:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----