Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File:                     xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier:          LpI3PVOVkjX+o4MaG5mxwH2OzZKeGnCRdc08J2NhZqE=
Subject key identifier:   FC:62:01:CE:68:3C:AC:7E:0E:F0:C2:95:72:AC:C3:87:1D:93:17:CD
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer:       /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial:       01962F073F5EA96ECCB3FBB3421A110BA83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number:          013C
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
                          2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: FM4b7ui7xTyZSq1dMGtlzY2VxcwlF9BWtdPcMVmGK+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:5e:a9:6e:cc:b3:fb:b3:42:1a:11:0b:a8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=fc6201ce683cac7e0ef0c29572acc3871d9317cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:80:55:d4:80:7d:c7:5d:cd:7b:ef:a7:b1:
                    2b:ef:d8:33:03:e6:01:dc:17:0a:2f:cc:5d:e1:d2:
                    4a:9f:2f:73:03:b9:76:16:6e:6f:0a:13:ba:a5:fd:
                    52:70:93:7b:4a:35:01:3b:72:03:76:bf:45:ca:c4:
                    a3:9d:a7:11:a5:ce:82:03:65:42:62:53:8a:0a:10:
                    ad:80:f0:13:54:6d:d0:04:c7:2c:a2:a9:4b:b8:a9:
                    9f:11:84:94:a7:dc:d0:11:67:d2:9e:30:8d:31:4b:
                    c5:6e:51:7d:05:71:e2:37:ad:00:45:32:34:96:5a:
                    cd:67:f1:d5:9e:f7:5f:ad:62:55:55:80:25:14:07:
                    33:5f:a8:b6:41:09:08:bd:b2:f1:64:0f:48:0a:9c:
                    e7:47:bb:b1:f0:b4:0c:8f:0e:79:4c:91:40:e8:a7:
                    65:87:4e:f4:ad:62:4d:0b:eb:4c:47:f4:5e:17:d9:
                    c2:58:d6:24:4a:84:28:fa:3a:d8:39:43:b2:f6:ad:
                    56:4f:98:04:8d:d9:84:2b:27:42:50:e7:95:81:ad:
                    ed:24:05:8c:1e:ca:8f:bc:83:68:60:57:1e:70:4c:
                    8c:0a:56:03:4e:2d:e9:42:e0:40:cb:f3:51:6f:f5:
                    8b:2b:5d:c6:65:6e:03:d6:e2:b6:79:bb:a2:55:51:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:01:CE:68:3C:AC:7E:0E:F0:C2:95:72:AC:C3:87:1D:93:17:CD
            X509v3 Authority Key Identifier:
                keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:52:e6:fc:95:f1:d9:88:ca:32:52:73:c3:39:7d:fb:13:
         39:8b:2c:e1:29:42:a6:aa:71:a8:b8:7e:c4:a0:6b:0c:66:0a:
         53:67:20:80:32:5e:5d:fb:97:11:04:cf:d0:46:e1:52:60:15:
         58:93:1f:df:f9:d7:10:11:c4:b9:ed:a6:52:c3:9d:72:52:14:
         d0:ab:5a:9d:a3:3c:0c:73:9a:04:0d:6f:e9:fb:da:c7:f2:d8:
         7e:63:d6:b4:77:1c:3d:d2:53:f2:3d:3e:50:e6:d6:ce:08:27:
         a1:82:90:04:1f:7b:1c:29:a4:25:50:3c:8a:c4:04:8a:4a:b9:
         e5:25:e5:cf:16:93:b0:7e:23:b6:23:13:5a:3b:4d:a1:3a:ae:
         1c:c2:5a:74:3f:cb:92:f8:09:e2:51:0c:cf:e6:7e:ff:07:ce:
         d1:1d:86:90:e3:b1:e7:9e:33:af:11:67:cb:b4:1a:03:89:32:
         67:f5:10:65:00:1d:f3:ab:1c:66:a5:24:2d:93:0d:96:2b:29:
         f7:4b:d9:0a:e6:1c:f4:9b:24:04:83:75:e0:69:9f:f4:1e:03:
         7a:f5:b7:d6:77:f8:0e:96:53:21:a8:ed:c5:e6:c3:81:50:11:
         51:38:23:77:b2:21:08:f7:30:2d:67:2a:1f:5e:fa:ee:96:7c:
         bf:d5:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----