Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
File:                     XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json)
Hash identifier:          CBZrSxDQfChnypJ7cNPE+Iy/gtSAf8mfpBoc9WqhNt0=
Subject key identifier:   47:26:76:9E:1E:C3:9B:B7:7F:97:3A:46:C4:B3:83:E6:9B:3A:F0:84
Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48
Certificate issuer:       /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
Certificate serial:       01962F07399F5F53B456D028E5F15A9F47F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=)
                          2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: 6qkd2ySHa4dyUsWkc28klM8fUXJBX/GXDQKhFfFrKUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:9f:5f:53:b4:56:d0:28:e5:f1:5a:9f:47:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=4726769e1ec39bb77f973a46c4b383e69b3af084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:9f:be:65:25:e9:f4:80:ae:4c:83:ef:78:
                    a9:fa:63:c0:e8:9b:36:5f:aa:b6:b9:52:79:d3:d7:
                    fb:59:de:16:3c:22:9f:c3:6e:8f:4f:81:ff:dc:1b:
                    b5:81:eb:d3:3f:ec:57:72:9a:cb:d8:d8:ac:49:0d:
                    f8:c3:31:1a:ea:da:6f:25:07:bc:43:e6:12:3d:74:
                    62:2e:9b:57:c2:72:6a:d8:e4:43:5a:a0:e0:d9:96:
                    c3:cc:ba:18:8c:98:9a:73:7c:84:f1:4e:43:91:99:
                    cc:ef:af:c7:57:b7:15:07:ce:93:a2:f3:d7:b2:93:
                    5c:79:48:87:3d:66:1d:5f:e5:9e:c6:d1:5a:6c:bf:
                    3d:52:8b:59:31:75:f8:db:9e:15:1f:9a:b3:a0:89:
                    4a:cd:83:26:37:06:3f:ac:c9:9b:47:c0:2b:22:bf:
                    ad:eb:24:c6:2a:81:d4:85:f2:73:6d:aa:0b:06:66:
                    08:eb:d0:dd:88:60:db:c4:38:ac:13:e9:6c:0b:8c:
                    db:bd:fa:04:36:27:2c:58:c1:c9:59:4c:1a:0e:08:
                    2e:d5:fa:5a:42:be:91:2c:06:cb:1f:5b:4e:05:a9:
                    ae:ed:4a:df:b1:36:f0:c2:97:7e:3a:33:da:44:76:
                    ec:74:1c:64:1e:87:13:2d:76:4e:c1:a7:6c:b0:30:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:26:76:9E:1E:C3:9B:B7:7F:97:3A:46:C4:B3:83:E6:9B:3A:F0:84
            X509v3 Authority Key Identifier:
                keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:9e:c4:53:ee:e6:63:ee:c2:d0:09:ca:6c:9b:08:61:5e:
         e3:62:c9:c4:5d:a0:dd:da:47:e9:ce:8b:db:48:5f:d8:e9:68:
         69:1d:c5:9d:6e:e9:d6:18:5d:40:b0:c1:91:e9:6b:a1:21:6e:
         6b:12:11:a7:64:2f:83:3c:7b:2a:3a:20:91:fc:93:27:48:d1:
         e9:d5:33:c0:0b:e6:a8:c5:c6:1e:fd:48:87:e8:85:8f:8a:80:
         dd:c7:a9:c8:f5:8b:c9:90:49:09:35:ec:da:39:b4:43:68:21:
         55:63:9c:aa:77:20:26:3c:f9:c8:66:fa:31:7f:df:0d:a0:58:
         e6:0d:e4:6c:e5:ac:de:97:f1:1d:68:29:f8:98:0f:56:a0:eb:
         d2:cf:45:00:b7:fe:d6:a7:5e:28:d1:67:5b:95:d3:db:21:f4:
         b4:69:c3:41:69:b1:59:6a:1b:ac:d0:ea:26:21:e6:42:2c:1d:
         14:13:ce:d0:b8:03:d3:f9:4f:f7:ec:fd:18:9e:11:cf:9b:e7:
         5b:c8:91:bd:0d:20:9d:4c:4c:4c:91:4b:6f:85:57:3b:e2:c3:
         5c:96:35:6d:39:1c:a1:2e:1d:61:5f:92:8a:a6:63:d4:df:51:
         59:29:cc:8b:aa:d6:a7:51:00:31:e9:20:a7:ef:40:ab:0b:bd:
         aa:32:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----