Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft
File:                     XYxMrtvxY99oiGrDtz8OTLQX4V4.mft (raw, json)
Hash identifier:          a/FW1dWn1Wta/S5uOH0sdLRCWa8PPKZVN2kvfzcz5Zk=
Subject key identifier:   AA:CD:D2:00:EC:A3:C1:54:18:0C:45:2E:33:48:87:B2:F4:E3:A3:9F
Authority key identifier: 5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E
Certificate issuer:       /CN=5d8c4caedbf163df68886ac3b73f0e4cb417e15e
Certificate serial:       01962E98A9133FDF1FC8C0655C58219A0F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYxMrtvxY99oiGrDtz8OTLQX4V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft
Manifest number:          0B27
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: XYxMrtvxY99oiGrDtz8OTLQX4V4.crl (hash: C3SsCHOFAwetnExeqPeztOJ+U8hBOshhhbQgodKn6QQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:13:3f:df:1f:c8:c0:65:5c:58:21:9a:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8c4caedbf163df68886ac3b73f0e4cb417e15e
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=aacdd200eca3c154180c452e334887b2f4e3a39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:29:97:69:13:a0:00:de:50:a3:c7:e5:d3:12:
                    cb:2e:ec:29:74:ac:8c:e1:9a:91:da:41:e0:5a:3e:
                    3f:25:f8:f4:78:6c:ff:43:fb:e0:26:4f:e3:83:48:
                    d2:c2:f0:41:68:b7:ea:fd:09:37:d8:20:4e:57:e6:
                    86:72:e4:dc:31:a7:da:67:99:28:9e:24:8a:8f:a4:
                    02:90:6d:1d:17:0b:13:f7:5f:86:61:d0:0f:6f:9a:
                    8a:f6:da:ae:26:58:d2:d9:9b:46:ae:12:76:39:ee:
                    59:b7:ab:f8:ae:b2:4c:10:49:8d:12:2c:be:a6:85:
                    3a:dd:55:7a:c9:dd:a0:0e:4c:50:3d:7a:b2:c6:5e:
                    ad:d4:89:a9:ca:f5:9c:d8:50:2b:6d:99:48:56:f8:
                    3b:0e:44:97:a5:10:66:a7:1b:57:80:b4:b0:6a:6a:
                    c7:c1:1b:f9:9c:09:17:2b:e1:0e:ee:1b:06:0c:2d:
                    01:95:8e:4f:41:eb:c5:81:0e:f9:a0:4e:b9:a7:17:
                    4a:59:64:d6:9e:14:cd:e2:ba:6e:1b:2e:1f:1e:28:
                    aa:78:e2:cf:7f:e4:0e:c1:7e:43:7d:1f:68:05:3b:
                    58:5f:04:1b:d0:21:06:83:9a:e1:cb:11:5d:a3:6d:
                    29:42:23:ad:2d:f5:aa:1b:1f:60:4c:5d:ec:76:0d:
                    3f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:D2:00:EC:A3:C1:54:18:0C:45:2E:33:48:87:B2:F4:E3:A3:9F
            X509v3 Authority Key Identifier:
                keyid:5D:8C:4C:AE:DB:F1:63:DF:68:88:6A:C3:B7:3F:0E:4C:B4:17:E1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYxMrtvxY99oiGrDtz8OTLQX4V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8d5433-6c2d-44f5-b6e0-fd6c470295d4/1/XYxMrtvxY99oiGrDtz8OTLQX4V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:52:ba:3a:af:17:fb:01:1c:5b:d9:ac:16:8e:64:c1:52:b8:
         43:45:49:90:14:cc:2c:76:d8:bf:c7:66:52:f1:97:6d:e9:bf:
         ee:fd:ba:12:ea:d0:56:d4:30:21:df:36:c0:56:7f:62:e5:9d:
         20:72:6a:80:04:46:86:87:64:a0:12:1e:1f:37:14:03:cb:fb:
         13:49:eb:7e:3e:21:e9:70:a5:bc:71:99:1b:4f:5e:d4:b0:9e:
         11:42:73:c4:cc:c2:6d:7e:c3:7f:a2:da:d5:80:fc:a8:05:df:
         2d:a5:f5:f9:ed:ff:63:32:9b:fe:11:a6:c0:d4:8c:48:51:34:
         8d:05:40:7f:17:af:63:73:a2:ab:14:a8:e6:86:9e:e6:43:be:
         a9:9b:74:a5:f2:cb:ad:99:d1:ab:77:38:90:39:5c:1e:62:eb:
         a5:a7:46:06:61:f8:14:71:be:b9:fe:22:8e:fb:e1:f7:5b:ea:
         02:23:96:c1:a4:e6:a3:c2:25:a0:4e:cb:7b:13:ec:e2:6a:86:
         8c:e0:ed:fc:4c:1a:5f:a5:c4:03:8d:49:8e:35:a6:66:cc:d4:
         2f:f7:4b:9a:99:1b:26:ee:66:29:2f:83:6c:9a:ff:f7:ff:f0:
         62:1f:62:61:9d:44:52:ce:34:ac:3d:05:06:a4:a5:63:a1:6f:
         0c:13:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----