Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File:                     XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier:          9YhWd9kkQijZ/piqSgM2Em/tJNFV5rEmmZCCIhCbHec=
Subject key identifier:   AE:FF:AF:CD:39:CC:9D:F9:D6:6D:A4:D8:CA:19:96:6F:AA:22:F2:61
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer:       /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial:       01962F063EF0C3C68C03F499892D3B6558E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number:          04BB
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: +qe1x66pzCffZgQ9cyLyFv5wbFKh0Xlh9Yj3jhHvvRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:f0:c3:c6:8c:03:f4:99:89:2d:3b:65:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=aeffafcd39cc9df9d66da4d8ca19966faa22f261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:39:e7:5c:ca:74:8b:6d:ed:8d:b2:54:d6:
                    1c:5b:01:f6:b9:63:15:b9:71:dc:6a:16:42:52:8f:
                    2b:fa:43:17:e3:87:72:4e:37:31:e1:8f:32:e9:30:
                    ae:15:c1:65:0a:b5:32:50:96:54:5c:8f:04:55:c3:
                    99:76:fb:98:9c:f5:99:5b:0b:89:f9:ff:60:4a:38:
                    e9:53:cd:b6:8a:a2:41:a8:72:8f:b8:c9:e7:71:16:
                    65:b2:70:5e:37:9f:0e:34:f8:27:33:0b:79:d0:33:
                    0e:bb:8f:93:63:ac:ca:e4:30:a7:46:68:e8:7b:93:
                    83:dc:6f:3f:c1:9e:bc:f7:19:a6:d0:d8:2c:68:90:
                    8d:40:e9:7b:41:ae:e2:78:4b:56:96:18:25:f6:4a:
                    23:e7:41:44:d5:47:f1:0b:90:c9:c2:d4:66:d2:4d:
                    08:3a:f6:60:9f:d9:6c:94:6d:e5:fe:51:43:55:23:
                    d2:60:ae:5c:94:32:1d:8a:16:a4:be:73:f8:85:b8:
                    f0:46:a0:e6:73:71:0b:28:7c:be:96:aa:e2:35:09:
                    4e:fa:a6:64:d8:54:cf:05:ec:1f:2d:36:93:91:4a:
                    c3:88:5b:1f:d0:47:ac:f3:fb:66:02:1b:16:48:f3:
                    c2:04:2a:c0:b9:52:3c:26:08:b1:41:ac:5a:bd:0d:
                    2a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:AF:CD:39:CC:9D:F9:D6:6D:A4:D8:CA:19:96:6F:AA:22:F2:61
            X509v3 Authority Key Identifier:
                keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:76:d8:28:c9:b5:d9:ea:02:b8:30:5a:41:2a:28:27:87:
         f1:b4:5b:98:08:df:e6:85:46:8f:47:e5:36:0b:2e:61:49:14:
         ec:8d:97:8f:a7:69:3c:97:ad:b3:61:7e:7f:f6:5a:57:78:4f:
         23:a7:30:b0:3a:8d:39:6a:1e:0a:9b:08:71:10:17:9a:b9:67:
         86:e6:4c:c7:4e:60:09:10:5f:28:3a:0b:f3:31:a7:a4:39:46:
         d9:ef:d2:eb:17:e9:d0:91:03:ff:f4:f0:00:b9:00:90:2f:82:
         af:82:ed:ff:bb:98:15:ab:f1:95:6e:53:1b:ce:28:ac:63:fc:
         3f:2d:5d:66:1e:d2:f3:79:87:05:41:1c:fe:8c:a7:f5:a5:19:
         c1:0e:bf:b2:4c:99:6a:28:4a:3d:6e:73:c6:46:e2:b0:0b:78:
         7d:b4:ea:e0:62:bd:5d:3d:71:26:41:a9:e3:7f:6a:f3:49:d4:
         70:e3:81:bc:dc:ab:e7:51:38:c0:81:11:a4:eb:47:64:c1:2b:
         29:f9:af:eb:8f:d8:e1:b2:e9:38:0e:9a:43:3f:4d:d8:c4:84:
         dd:53:4a:1e:ec:c6:79:86:34:c0:95:62:68:4d:19:58:6d:14:
         36:63:ea:cc:99:58:0e:21:a6:a5:ea:c9:8f:11:60:1e:e7:ed:
         4b:db:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----