Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File:                     1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier:          vEh9ZCwtgHxCFE070CK9rpRJ7+TayxErqjqaRdR1nTc=
Subject key identifier:   36:A9:9D:00:38:36:D4:3B:85:F2:C6:C9:71:AA:21:CC:ED:69:ED:C7
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer:       /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial:       01962F3D685B3D5C297DC60AED32E265F932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: AbOYZNxCfCBVnDiehgf6SIRpA7yFQ/Oqk3S7UL9UYnk=)
                          2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:68:5b:3d:5c:29:7d:c6:0a:ed:32:e2:65:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=36a99d003836d43b85f2c6c971aa21cced69edc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:ff:92:21:4c:04:21:53:7d:a6:50:4c:6b:
                    21:83:5c:a3:ac:8e:7f:cc:39:2d:af:c7:22:c1:fa:
                    6e:28:13:37:b8:6a:bc:a9:e5:03:1f:1d:a7:ac:52:
                    c5:be:a7:53:3d:15:85:31:d2:10:47:ef:fa:45:c5:
                    fd:8f:e7:46:7d:70:63:82:4b:45:91:7e:93:0c:b7:
                    65:18:9b:fa:44:f1:df:60:b4:6d:2b:2a:85:9f:e5:
                    77:32:ec:6a:e1:e8:4f:bc:3b:52:29:6a:2e:73:f5:
                    87:a8:79:7d:89:5d:32:1f:5e:ff:2b:15:bc:91:1d:
                    1e:80:a9:a3:88:e4:ba:bb:0d:05:b3:37:95:48:56:
                    1e:a8:a4:cc:57:60:94:11:6e:fc:6c:3a:dc:7f:89:
                    a1:c7:e3:d9:7d:db:84:ce:a4:b8:5f:6b:04:5d:6b:
                    5e:2d:35:c8:c1:5c:fc:96:14:db:43:7a:36:e3:63:
                    1d:19:21:42:a4:35:e7:c3:a4:7a:cd:05:94:3a:54:
                    f8:a8:2e:94:83:fb:4c:fd:1a:03:4b:a0:1c:9c:a8:
                    38:46:06:a7:1d:8a:2d:1c:42:77:f7:01:59:75:20:
                    40:bf:47:a7:ef:6e:8b:c3:be:0d:67:53:b9:de:48:
                    e6:dc:0c:70:d9:e7:b6:e1:f5:b7:f9:0e:a2:ff:fb:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:9D:00:38:36:D4:3B:85:F2:C6:C9:71:AA:21:CC:ED:69:ED:C7
            X509v3 Authority Key Identifier:
                keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:ab:c3:74:a7:0e:e1:a7:75:71:dd:9b:f4:11:45:bb:fe:
         df:69:4b:1f:79:fb:40:92:11:d4:68:1e:e9:28:ca:3b:29:38:
         31:0a:1c:73:db:5f:93:5f:f4:ec:a0:f8:c9:68:2f:c4:85:b0:
         c3:72:98:be:33:a8:ee:18:9e:a4:52:16:73:ef:19:48:07:69:
         0a:3d:84:ee:53:36:81:5b:13:cc:2c:62:40:d3:55:22:46:d0:
         92:f1:15:0b:3c:50:1e:9f:e6:0e:e1:37:2d:d3:38:6b:f1:f3:
         ca:0e:15:e8:47:e9:88:68:dc:18:69:a1:10:a6:40:8e:78:b7:
         fb:e3:69:54:76:40:91:34:3e:ca:25:70:17:b4:62:49:45:83:
         a3:e7:1f:05:ea:da:b2:f9:9b:42:07:3c:6f:9b:86:07:e8:dd:
         7e:5d:be:4c:c5:31:53:de:e0:5a:86:6f:1f:bd:ac:39:ad:56:
         1f:32:08:25:05:2e:a6:08:4b:ff:2c:f5:ce:51:9c:99:42:86:
         9f:ab:c7:2a:25:b7:da:23:9b:8c:fb:f3:c3:e4:a1:7a:19:d0:
         ec:ee:77:c5:4d:f2:56:a2:4c:ea:6f:91:90:1a:53:d5:5f:24:
         c2:d4:47:60:06:8c:45:73:0e:de:63:a6:cd:a1:5c:e3:f1:c9:
         03:e1:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----