Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft
File:                     XTTdv33KsQy_aCKXkh61gS2QUHE.mft (raw, json)
Hash identifier:          U1xiB4BBkQRVKVuJyzm/flS88wZ5R2sQyal77T+AwZs=
Subject key identifier:   AF:D1:0F:71:48:9E:9F:2B:72:F1:60:F7:E4:95:08:6C:2E:3A:AA:89
Authority key identifier: 5D:34:DD:BF:7D:CA:B1:0C:BF:68:22:97:92:1E:B5:81:2D:90:50:71
Certificate issuer:       /CN=5d34ddbf7dcab10cbf682297921eb5812d905071
Certificate serial:       01962E61E030CF4B4C48BCA2AE306423A26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTTdv33KsQy_aCKXkh61gS2QUHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft
Manifest number:          03E8
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: S6aYdrXE8VeCcP5w8D7hhhcOGoc.roa (hash: csN/l/mC6C7LyFwDFQUEKU3wX0HgZWqjImlEztzBO3Q=)
                          2: XTTdv33KsQy_aCKXkh61gS2QUHE.crl (hash: CzgC6eu2m7fZkpCK+LnT70Wnqsc1v4N/gTmY4sBtyOI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e0:30:cf:4b:4c:48:bc:a2:ae:30:64:23:a2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d34ddbf7dcab10cbf682297921eb5812d905071
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=afd10f71489e9f2b72f160f7e495086c2e3aaa89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:95:a5:4d:42:50:d3:8c:1a:af:5b:52:92:
                    94:68:d0:af:77:d3:1d:38:30:ae:0e:0f:d7:01:1d:
                    57:fc:92:9c:45:ef:c5:b4:17:eb:54:d6:2f:fb:ad:
                    db:63:be:ae:04:bb:6e:3b:13:11:72:34:86:6c:fe:
                    82:ec:cc:f8:2c:e7:a5:43:e9:c6:b9:e2:91:f0:de:
                    1f:d5:bf:09:00:2b:b2:b9:49:d8:7d:04:bb:65:91:
                    5b:60:7d:57:c8:8c:52:45:76:f9:2c:c7:b7:af:0c:
                    dd:d2:04:ce:21:aa:4f:47:dc:fb:85:81:18:05:9d:
                    8e:24:d3:2b:bd:f7:32:8f:3a:fa:61:06:af:68:d1:
                    7f:42:04:1a:ac:28:02:8a:68:c0:36:d0:c8:dc:63:
                    61:03:6a:57:af:a8:71:0a:4d:5d:3b:63:18:ae:e7:
                    15:12:b5:55:79:77:77:32:4a:0e:17:a8:b3:cc:31:
                    cd:8e:7b:6e:19:49:58:60:5f:42:90:62:ce:90:31:
                    0e:e6:1c:9b:76:d5:cc:5f:69:4f:ac:a1:5d:d6:d7:
                    7c:1a:df:33:67:d7:db:8f:30:5e:8a:e2:04:03:b6:
                    2d:90:3a:97:2c:1f:14:1b:9a:1a:da:20:f3:fb:e1:
                    22:e3:45:ac:db:46:d0:ce:e1:ed:b8:ac:59:80:d1:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D1:0F:71:48:9E:9F:2B:72:F1:60:F7:E4:95:08:6C:2E:3A:AA:89
            X509v3 Authority Key Identifier:
                keyid:5D:34:DD:BF:7D:CA:B1:0C:BF:68:22:97:92:1E:B5:81:2D:90:50:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTTdv33KsQy_aCKXkh61gS2QUHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a9:11:15:f8:a1:0e:b2:a7:4f:f5:27:bc:aa:c7:38:6e:bf:
         96:03:66:12:41:b6:7f:85:de:cb:56:89:73:73:76:b2:36:4c:
         94:dd:1f:1c:fc:90:74:bd:2d:e2:14:68:32:9b:da:c1:7e:d4:
         f9:24:07:46:00:0e:8d:95:1d:bb:8b:c9:05:4d:1f:a8:16:4a:
         11:fb:54:d2:ee:93:84:b3:5c:3e:f5:eb:4c:8e:82:05:6c:2c:
         05:a5:15:b8:43:fa:92:13:07:f2:76:8a:25:a5:2f:d8:cd:41:
         80:7d:6b:f3:6a:5b:15:93:b9:ba:62:31:75:19:b9:02:06:c2:
         1e:15:31:59:d9:46:f2:89:10:4b:94:bd:cf:dd:57:cc:b5:00:
         a6:97:00:4c:94:01:e2:36:f3:25:34:ef:0a:9e:6e:74:58:ec:
         46:05:2d:c8:3d:ca:81:61:69:11:83:3c:fd:6b:0d:13:3c:11:
         f0:8c:33:e6:88:64:f4:2d:b2:63:53:6e:ad:d2:97:dc:3f:9f:
         6b:e5:cd:95:21:b4:99:b7:83:b3:a5:8c:18:28:67:db:1f:b9:
         83:6f:e5:d4:a8:00:a3:f8:6a:02:6f:1e:1c:8b:62:15:a7:dc:
         4b:3e:c2:16:a0:02:a8:09:06:b9:8a:18:81:c2:73:79:ed:fc:
         b6:4c:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----