Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File:                     xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier:          4OaeerqolWRJcRL5gfYP3C89DJku4Js2BpEx8HduPxo=
Subject key identifier:   30:CF:00:6D:9C:F7:F8:34:60:13:E7:48:54:27:E9:55:70:58:51:C5
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer:       /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial:       01962E98AD1E48B2A0EC913D2C18EC3D2F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number:          FB
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: GUbgPZS8b1mJVA-CDXEfke3rKwU.roa (hash: DGiTGvvsu+oEkX+7jMPXSS7hmVWxoFzlEXAOHRpDGto=)
                          2: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: 4j8JrdV1hP3HIAIeDDUl5ft7+j8R0UJa6SudOS2GlJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:1e:48:b2:a0:ec:91:3d:2c:18:ec:3d:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=30cf006d9cf7f8346013e7485427e955705851c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:f8:46:a7:b9:bb:91:3a:b7:72:ba:2b:4f:
                    b0:f3:64:92:3f:21:d8:a9:56:82:50:da:4a:2d:5f:
                    0b:71:fc:3e:83:e8:ff:8a:d9:11:2a:87:e7:47:7f:
                    10:f1:9f:12:b5:09:a4:bb:4e:62:69:fd:0c:48:dc:
                    82:d2:3b:75:ae:70:36:44:0b:12:04:2f:aa:1e:4b:
                    4f:f1:96:83:ba:ba:36:a8:a2:54:46:30:d4:df:20:
                    0b:a4:e2:55:01:85:ff:42:d1:2d:dc:c8:9d:54:e9:
                    38:9f:4b:30:78:f7:a9:7e:fd:05:30:bf:ab:7c:a5:
                    24:50:b8:d0:12:27:3c:11:e5:0e:74:5d:e6:f7:ae:
                    a2:82:e5:6f:ce:b7:d3:d8:e6:64:99:d7:91:0e:92:
                    cf:6a:be:b6:04:82:6b:d8:a2:b2:d9:16:06:42:2a:
                    06:6e:50:1b:9d:b4:79:81:9b:2c:5a:47:d2:78:b4:
                    0f:27:d3:bf:83:a5:ef:8d:cc:87:96:c7:eb:ed:fb:
                    fd:bf:3c:50:b1:a1:82:74:c7:d8:8b:07:b0:f9:8f:
                    52:78:76:95:a4:26:07:cb:6c:06:27:e3:18:60:ec:
                    00:4a:50:6e:eb:5c:ca:83:db:e3:e2:b4:b4:e3:03:
                    d1:58:35:d5:18:14:8e:81:e5:62:c2:74:fc:ca:86:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:00:6D:9C:F7:F8:34:60:13:E7:48:54:27:E9:55:70:58:51:C5
            X509v3 Authority Key Identifier:
                keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:4b:f2:4f:eb:ca:fa:74:0e:56:97:a1:c3:58:f0:91:f1:
         19:c4:be:d9:29:ff:04:ba:4d:b8:61:e4:48:b1:ce:8f:6e:7c:
         71:73:72:b0:da:84:47:54:08:a7:ef:77:2a:81:6b:75:40:cf:
         13:49:22:5e:c4:b1:ad:25:a6:fb:6a:fa:36:cb:8e:3c:fb:ff:
         55:fe:d2:00:89:db:e7:00:b0:76:7d:35:b3:75:b8:02:23:60:
         15:0c:6b:73:e0:6a:d9:f4:2d:99:5b:bb:16:1d:ff:dc:d9:fd:
         bf:3c:b1:9a:c0:f4:9f:b3:7f:e5:81:e2:87:f4:da:90:f2:cd:
         31:d9:f4:46:68:4b:c0:fc:80:f6:59:cc:53:42:a6:04:4e:59:
         a9:31:75:d9:f7:4f:90:1f:c2:c9:fc:d7:91:56:81:d8:c2:93:
         cd:62:63:91:10:30:63:62:51:26:95:11:a1:ab:b4:9a:23:2a:
         9a:d3:cd:ee:7c:18:99:7b:1e:f5:a0:d0:8a:8f:b0:bc:c9:f7:
         07:dc:d1:3f:32:07:b6:82:8d:3c:be:91:f6:d6:83:09:73:ce:
         8c:73:12:66:3a:2c:8a:09:c0:4e:b4:6c:b4:d0:86:1b:44:3a:
         0b:65:fd:e1:64:22:26:86:c2:94:79:b0:62:f5:c2:9e:1d:9d:
         f4:2e:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----