Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          5lBh9ww/PenbjOR7eEb5womJodEA7nqY8duokRQpLVI=
Subject key identifier:   3C:52:90:62:3D:8A:AB:E2:4F:6C:F0:54:AF:D9:66:4E:2D:C2:36:20
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       01962DF43E04757C2D15F9014185B7EB0971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1520
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: hQ7lsegIAszIZdEKaDw8FvB3PTlidfXt+p/sBnrP5Lg=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:04:75:7c:2d:15:f9:01:41:85:b7:eb:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=3c5290623d8aabe24f6cf054afd9664e2dc23620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:5c:81:e6:93:29:66:64:97:8c:38:e6:84:
                    05:40:5f:74:4d:72:2b:23:08:6b:1c:e3:a9:ea:ec:
                    05:80:82:4b:71:dd:3b:4f:b3:32:fb:74:73:0c:73:
                    87:5f:81:17:4a:26:aa:41:0e:38:9e:92:dc:93:1a:
                    39:9f:3e:17:65:1a:cb:6d:65:fd:0e:f4:a0:b3:58:
                    e7:e8:23:15:9b:a2:f0:cc:27:f5:c2:ec:5f:77:38:
                    9f:94:b7:e9:4a:20:d7:d5:1e:33:62:04:a7:33:f8:
                    1e:a6:a5:9f:a1:da:9d:60:72:50:b1:f1:e9:02:2d:
                    06:2b:b8:79:df:73:16:31:63:e8:4f:a7:63:bb:c8:
                    74:c3:68:df:e8:84:48:c5:aa:26:12:43:6f:ff:cb:
                    89:ff:5c:c7:fc:2b:34:ba:8b:b2:59:b9:b5:af:f2:
                    9d:f0:3e:37:f5:07:ec:63:c8:59:7d:6b:3d:d0:4a:
                    cb:41:59:b6:1f:e6:b0:56:f9:df:7d:8f:2e:2b:3e:
                    ba:9b:29:3e:ef:6c:33:86:bf:cf:90:f7:75:c6:a1:
                    77:46:c3:d9:fa:6f:f6:33:59:0f:b7:33:86:e4:ae:
                    73:7b:cc:52:8d:9a:a6:52:84:88:21:c6:4a:f3:67:
                    2c:76:d3:85:bb:5d:43:59:5e:32:12:0a:78:35:22:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:90:62:3D:8A:AB:E2:4F:6C:F0:54:AF:D9:66:4E:2D:C2:36:20
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:92:af:35:a2:d0:29:ed:50:f8:2a:dc:91:12:9f:5f:75:
         1d:2d:3d:f4:c1:49:45:80:75:51:8e:a6:f9:50:af:92:75:b0:
         90:4f:7d:86:d8:8a:c1:ab:b7:29:f2:5a:0d:07:47:40:60:da:
         83:1f:fc:d7:36:48:b1:af:78:72:4b:1d:09:19:43:37:a8:45:
         34:d0:c3:48:05:14:c4:06:c3:e4:be:f1:e0:f9:80:01:af:6a:
         cc:53:d3:18:9d:f2:50:f3:6e:36:45:0c:51:a5:c0:1d:2c:23:
         42:f5:4d:b2:b0:08:fd:20:61:f3:25:e4:29:ee:b5:3e:50:26:
         30:3e:0d:a3:3d:6d:f3:e0:49:77:99:ae:66:1f:9d:fb:10:df:
         ea:af:79:04:e7:dc:88:ae:1d:18:80:67:fd:ac:9d:ec:b2:c8:
         e2:8a:74:6d:89:ad:d6:bc:e0:3d:de:b4:f7:09:e4:6c:77:ad:
         84:a0:88:0e:d8:65:ad:00:8a:73:da:81:a3:6e:75:3c:b5:55:
         32:ff:f2:49:df:1c:c4:40:c8:7d:1a:ee:72:4e:d4:ec:76:12:
         1b:1c:67:1f:02:37:99:98:8d:33:70:28:22:ba:ac:1e:9f:f5:
         dc:6b:2d:fc:54:ca:0a:3d:5d:7d:46:58:31:78:c8:97:26:fd:
         61:5f:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----