Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File:                     XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier:          rgo7L4RK9KCiWoS1dPBSVzbXTs2F58lkBU/GcjGbI70=
Subject key identifier:   2E:0D:ED:6B:F8:B7:74:90:37:A2:29:4B:54:30:5E:42:F6:A0:04:33
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer:       /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial:       01962E9891B42741E61D48D1F8799FB2963B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number:          08A6
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: /AYa6RQPjiFWwVjUttK2vs4/vXDAyeDbVp2g11RBU8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:91:b4:27:41:e6:1d:48:d1:f8:79:9f:b2:96:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=2e0ded6bf8b7749037a2294b54305e42f6a00433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:02:ae:38:32:c8:be:07:98:4d:5e:d2:7f:72:
                    db:6a:42:19:65:61:27:07:96:e2:d1:5b:c3:9a:4c:
                    71:69:50:0a:b2:e2:4d:37:63:49:e0:5c:43:1a:28:
                    3b:42:fc:a7:71:71:05:24:94:9b:6e:d9:91:0b:05:
                    65:ba:1e:c4:16:69:34:42:d6:91:6f:f7:61:bd:a4:
                    24:aa:73:e6:cc:a2:be:70:07:dd:c7:45:a7:84:94:
                    ae:76:90:0b:97:22:33:66:03:f3:48:d8:35:3d:fd:
                    18:01:58:2b:19:67:cd:48:72:9c:71:7a:71:74:17:
                    8a:bb:d7:9c:d8:59:d8:df:67:d4:a1:ad:04:e7:ae:
                    db:4b:54:fb:be:e0:2b:db:79:7a:96:d8:7f:2d:95:
                    d5:e7:3f:9e:2d:ef:dc:cf:83:b8:c1:69:92:11:86:
                    5c:fb:b5:af:ed:56:62:cc:b5:08:88:bf:db:a3:45:
                    5c:c0:f5:bf:4f:b9:2d:a9:a0:a8:15:ce:f9:51:d6:
                    bd:dc:4d:0e:32:1d:1b:60:7b:70:95:60:9d:c2:2a:
                    9c:85:9d:b4:e1:23:1b:06:15:8c:c4:08:55:cd:03:
                    28:6d:9a:7e:a7:6d:73:9b:ec:0e:f7:2f:5c:3c:f3:
                    69:ac:3a:dd:55:23:9e:93:f2:0a:ed:54:23:66:fc:
                    75:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0D:ED:6B:F8:B7:74:90:37:A2:29:4B:54:30:5E:42:F6:A0:04:33
            X509v3 Authority Key Identifier:
                keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:9f:b7:8e:af:17:3d:36:8c:25:de:06:29:ea:0a:da:cb:a4:
         cb:db:13:f0:c8:54:a0:f5:34:cb:32:88:3e:a3:80:b9:23:ce:
         2b:e7:4a:7a:51:92:31:4b:ef:62:7b:a5:39:94:3b:99:4d:9c:
         de:00:4b:75:fb:9f:29:0f:95:32:69:3a:43:d4:1d:9e:60:c6:
         9f:46:05:f4:11:16:52:e1:1b:ec:36:c2:35:f2:40:41:e1:69:
         52:56:6c:c8:f5:94:3c:40:b4:7f:b3:de:09:49:be:cc:78:89:
         58:a8:84:78:c1:b0:52:51:f1:fe:83:cf:c9:bc:97:b2:7d:a0:
         05:08:bb:4a:c2:4a:fa:47:78:ac:5c:2c:2f:19:0e:cd:e2:6c:
         9d:47:51:2a:59:84:5e:6d:dc:8d:f3:99:bf:90:72:f4:28:5f:
         28:2b:2a:d9:80:f5:f4:69:31:75:0f:c9:64:52:48:e8:35:41:
         45:aa:dc:86:77:11:5e:70:e0:e0:db:17:57:38:38:39:f4:4d:
         be:e0:d6:f8:98:fa:fe:78:aa:45:51:53:6f:a6:d7:a8:7d:68:
         f8:d9:1d:c9:01:8b:2f:8a:95:d9:49:a4:f1:61:7f:2a:01:20:
         d3:db:92:a4:be:10:bc:ba:7a:36:14:ae:72:9f:c8:5f:48:2b:
         fe:15:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----