Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          ATTjwhJtGW4NvNwkE+R18Lx2/NvgnC3XVfjTp+dJr0c=
Subject key identifier:   5E:AD:80:FD:70:B3:86:7A:F2:3A:53:5D:19:6D:C0:40:37:08:4A:70
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       01962DF42D50851E4FD9BDD4459B15ABADFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: 5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa (hash: 2NGAlI2hdHDlD8sS8ypuBUMUFfaks46LhBx0UYSSPaA=)
                          2: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          3: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          4: P19E_mZ30tdEHCoKWD_RBelIVm8.roa (hash: wn50ZQD7mmlSVGQuWKsydCfGSzOAX4sma0GjvM42Xlc=)
                          5: TsuT9Vw01G7XqqTGmTLgG8Nw8uM.roa (hash: ibCOP7I9k1NxSVR0Ud+oed1vqdJZQQbZepYSXJmVuOo=)
                          6: b_Rjl7l5s2ruXfIZC3d6OBIlvjw.roa (hash: RN1eBvJ7M9cQIHDZtgB/+TlsTuYLflAWSHeZCPPxyMY=)
                          7: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: 3r8i6XubRpIgcFvdTcUujyJHF92+UyHBh7KEEDRiQUM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:50:85:1e:4f:d9:bd:d4:45:9b:15:ab:ad:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=5ead80fd70b3867af23a535d196dc04037084a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:1f:17:aa:8b:1c:99:a8:a6:87:10:ff:b9:
                    d0:c3:5e:e9:f4:78:24:1c:34:3b:eb:6b:cf:7e:5b:
                    9a:7d:a6:56:19:20:58:54:0a:77:fc:cc:82:23:5b:
                    dd:8c:23:f1:c9:4c:76:0b:d5:44:e4:0b:af:41:3b:
                    79:68:cc:3d:cb:ae:0d:d1:03:c8:fc:fd:25:4e:72:
                    5a:f1:17:6a:e8:42:78:49:5f:00:e8:ac:67:fd:8f:
                    86:02:b4:42:33:84:18:08:eb:dd:17:90:f8:b8:2a:
                    fa:fc:c4:7a:0c:2c:e6:77:db:61:3a:d1:0d:26:f1:
                    79:28:53:b7:15:e4:a7:38:fa:c2:2d:da:cc:3e:8e:
                    f3:bc:87:3d:ba:c0:19:d0:de:f8:cb:74:46:12:16:
                    43:b8:72:dd:81:20:ce:b2:de:25:26:a1:83:aa:92:
                    fc:e8:8b:48:5c:e6:da:a2:97:4c:89:2e:ba:ab:1a:
                    64:cc:d8:ce:45:56:07:ee:e7:29:4a:4c:a1:98:9f:
                    6f:9e:25:d6:90:0e:7b:ff:df:aa:76:e3:a5:9e:c9:
                    07:60:98:ad:f6:2c:46:f4:4f:03:97:6f:0a:a1:f5:
                    0a:b6:74:ad:8b:d2:8f:02:5e:20:3e:f7:d1:7a:ea:
                    40:d3:85:c4:50:ab:ca:72:92:a5:04:c7:01:6d:75:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AD:80:FD:70:B3:86:7A:F2:3A:53:5D:19:6D:C0:40:37:08:4A:70
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:7b:65:c2:9f:9c:00:10:7d:eb:1c:b2:38:55:0d:7a:8e:
         9c:bb:f2:e7:9b:4e:69:0c:34:f5:04:b1:4c:ac:e1:b3:88:75:
         02:47:e2:2b:67:47:6b:e4:c3:4c:6f:ff:6a:64:6e:e2:8d:e4:
         ba:40:06:a2:55:b0:c8:1d:f7:86:3b:70:42:4c:bf:01:37:1b:
         f3:aa:a6:aa:5a:31:0a:09:7a:a9:82:c1:26:7b:3d:2a:87:de:
         3d:b5:18:12:c9:f8:d3:24:25:a9:aa:b0:d7:ed:b7:af:72:f3:
         43:9e:8a:95:3c:51:62:81:4a:57:74:d0:0e:72:20:da:b6:62:
         6f:54:38:b0:d8:7b:fd:2c:70:c4:81:de:93:30:31:db:9e:af:
         99:ac:ba:aa:04:8c:e7:68:5b:72:31:b1:6c:61:c9:72:e1:5e:
         5c:9b:29:76:92:9f:49:25:05:85:e5:b2:d9:e4:02:fa:8c:c9:
         52:d3:bb:9e:f3:a5:1a:5e:b9:86:75:c9:9b:7d:eb:08:02:6e:
         ca:c7:62:80:0f:8f:40:6e:b1:f1:51:86:0f:cc:16:2a:08:31:
         51:34:20:a3:80:e4:40:26:ca:7f:c6:8e:1a:25:a2:70:ad:ad:
         eb:c7:8e:a1:66:d2:a4:0d:ae:20:37:bd:d8:54:b5:5b:d3:37:
         c1:fe:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----