Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          kuydAcki8SuKHzZDiHo+6hOW+qXI+cdNYDnaROFoquo=
Subject key identifier:   AF:32:D3:F2:84:DC:8E:C2:E4:81:FC:CC:A5:5A:80:1A:2A:A2:EB:53
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       01962E9933482D3AE44678C0F2652DF4AEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0910
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: 8EsqtQ+qrInu2o+g3JfE1ewWZGrWY4vc+WvkeVcinDk=)
                          2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:48:2d:3a:e4:46:78:c0:f2:65:2d:f4:ae:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=af32d3f284dc8ec2e481fccca55a801a2aa2eb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:0c:d3:a6:7f:09:c6:2f:43:60:08:6b:0e:
                    a1:61:14:64:d7:31:9b:87:61:2c:b3:65:6c:af:08:
                    39:04:b4:19:66:54:67:8f:80:07:46:39:9c:50:87:
                    90:14:d0:8a:67:0f:2e:47:1f:51:d4:d0:fc:43:0d:
                    62:30:54:fc:57:a6:79:aa:69:d8:07:78:db:8b:17:
                    e7:01:71:71:e4:22:41:89:3d:f0:c3:9b:6a:4d:a4:
                    33:ab:d7:ea:3a:5d:71:48:10:5e:75:fd:25:a6:a0:
                    58:09:7c:cb:a3:ae:06:9b:e8:b6:6a:b3:c8:18:91:
                    47:ce:88:58:b3:2b:c6:42:5b:9d:38:ed:b3:a3:2c:
                    34:30:a2:aa:2d:70:b0:78:e7:76:8c:28:76:18:e4:
                    b1:b7:f6:74:d9:42:c6:ec:52:4b:7a:b5:05:cd:d0:
                    44:db:62:54:d6:da:ab:92:15:8b:3a:2e:5f:29:84:
                    00:f3:4d:da:ca:f5:30:09:90:6e:15:14:f8:eb:68:
                    8d:3d:0b:f5:a7:0b:1d:bc:9d:5a:52:11:90:a5:b9:
                    60:1c:d7:4d:e5:b4:d6:52:ac:15:0a:20:7a:9c:2b:
                    64:75:71:7f:3b:eb:05:4a:e2:3c:a4:a6:0e:97:a5:
                    55:ed:e9:c2:4c:a8:8b:ad:36:f0:6a:2f:37:d9:02:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:D3:F2:84:DC:8E:C2:E4:81:FC:CC:A5:5A:80:1A:2A:A2:EB:53
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:76:40:71:4d:12:26:2a:61:30:b9:58:18:35:ba:f9:eb:
         fa:fa:e4:a6:4c:ad:08:1f:da:55:c4:b7:13:07:c1:87:39:f2:
         85:4d:73:c1:a6:b1:9d:38:29:ce:a6:56:1e:e0:1e:d9:60:1c:
         e7:54:85:84:32:86:f7:35:ba:8a:9d:19:98:ea:72:3f:47:4c:
         e4:d6:73:4c:04:b0:28:b4:ef:2f:b9:92:85:33:6a:ce:8d:61:
         34:5c:fc:4a:ee:ea:3e:c1:4a:a2:4b:9c:e1:f0:65:fc:2d:88:
         c5:f7:4a:e8:97:5e:02:80:6f:2b:38:a1:df:62:f7:a2:51:f5:
         91:3e:37:73:cd:09:eb:af:cd:16:43:6e:f1:d9:55:63:c4:94:
         07:74:29:f1:b0:fd:a5:33:e8:be:25:65:d9:f6:f8:e3:f9:2a:
         13:9a:5e:38:37:1c:43:03:95:b4:4e:d6:62:c4:03:87:5f:b0:
         b3:7a:41:09:d8:2d:56:84:74:7a:77:f0:08:64:60:2b:b9:35:
         c7:d4:75:7e:8a:23:a1:42:09:b7:db:ef:cc:95:b4:cd:ea:53:
         94:7b:57:51:03:ce:f6:85:dd:52:3e:b9:e6:66:2a:c3:59:88:
         7c:4d:68:4d:82:1e:93:4b:f0:6b:b2:d0:2a:6a:61:ad:f5:f0:
         2b:0d:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----