Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          pid9uP5wqTD9qxgD4Jn+VM0Ri0L5cFhuvZizrOkFtN8=
Subject key identifier:   F4:83:5C:50:F5:DD:71:AB:6C:48:A4:29:56:79:5E:5F:1D:C0:F8:D9
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       0195E0EB956274731BB4C1875CA8CA0D145F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          14DA
Signing time:             Sat 29 Mar 2025 08:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:30 +0000
Files and hashes:         1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
                          2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
                          3: QwE0tg9LdKDVZgDoLhxVp6PBffA.roa (hash: yMurYSYF30pu2PNCcOKhyaRqq0L6zG0Fnt31htAIGs4=)
                          4: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: cua3BofGK58TwIO+FB0ihzC69iTKpA/JyXQ+M2JXv6g=)
                          5: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
                          6: h1tX918Ru7wMIHZ954P0v306Xyg.roa (hash: Zg0OUrwbI/zN84U1nYJmwSF5Cq40+ooxa0FqsV8xXqQ=)
                          7: nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa (hash: Uo4ERWbv/tv9kXt93hPjc50gZuYNeg1Dqy1Fb1Nzfa4=)
                          8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:95:62:74:73:1b:b4:c1:87:5c:a8:ca:0d:14:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Mar 29 08:01:30 2025 GMT
            Not After : Mar 30 08:01:30 2025 GMT
        Subject: CN=f4835c50f5dd71ab6c48a42956795e5f1dc0f8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:2c:73:23:15:18:2a:1e:ac:d9:13:92:a9:
                    4a:fd:27:e9:90:7b:c3:e8:9c:e7:b6:82:d2:8a:40:
                    c4:70:96:50:8d:4a:35:1b:fe:64:18:ba:3c:cd:56:
                    4f:62:51:40:a8:09:5d:c0:c1:1a:50:d4:d6:6a:86:
                    bb:29:31:69:95:cc:07:d1:4c:d1:2d:ac:f9:7e:f0:
                    14:a0:47:b6:f3:53:25:16:d9:38:d7:c3:a0:b2:8b:
                    1a:d2:fc:56:e0:f9:4e:d3:c5:2e:0c:d8:2a:b2:ed:
                    25:38:f9:c8:b3:a8:47:1c:d8:af:79:82:5a:f6:92:
                    2e:57:73:57:8b:6b:55:2e:c6:30:1b:5a:14:f2:0a:
                    fd:2f:04:83:37:b9:ce:58:7f:ac:4d:dc:00:3b:48:
                    cb:09:5a:a6:d5:26:64:a7:34:f8:2e:01:aa:4b:78:
                    9c:cc:bb:6a:45:a2:5d:0a:16:05:24:fb:a3:f9:8e:
                    f4:26:5a:e3:87:51:a7:3d:f6:06:ed:0b:b8:91:5a:
                    cb:7b:45:70:3a:65:97:49:20:60:70:5b:da:f1:20:
                    cf:98:6d:2a:0b:7a:91:e5:e3:ee:9e:3e:87:ee:95:
                    fe:a3:8e:79:1e:0c:14:26:1c:bb:e8:12:8e:fa:e3:
                    d9:db:b6:9d:fd:e3:74:f0:75:4b:14:89:c3:01:72:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:5C:50:F5:DD:71:AB:6C:48:A4:29:56:79:5E:5F:1D:C0:F8:D9
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:59:d1:6c:44:d8:63:ed:d2:43:b9:fa:b9:cf:42:8c:27:bf:
         dc:4b:a7:b3:81:21:88:ff:30:09:0f:42:1d:8a:7b:3d:1a:57:
         01:db:92:48:22:bf:26:ad:90:44:a1:fd:d1:83:96:c4:87:83:
         82:9c:d9:96:e2:fa:ed:3a:e5:a1:f1:ae:05:13:62:aa:11:b9:
         70:b6:67:af:65:35:41:79:7d:fd:15:b2:8b:e0:dd:f6:0b:a9:
         b0:e9:9d:31:e2:1f:5d:e5:34:ba:11:ac:de:c6:b8:6d:5a:9c:
         ef:9c:fe:6a:37:44:45:8d:42:7d:8e:04:64:ac:e1:d9:70:28:
         8c:04:a2:77:25:ce:d0:d4:77:3f:06:49:b4:cc:59:96:8e:74:
         7b:da:ec:ea:4d:f7:12:f2:78:44:ea:de:01:39:e9:39:be:c5:
         3a:26:40:c5:95:1a:cb:03:cf:5b:53:09:43:5a:5b:32:a7:14:
         1e:f6:ac:4e:b1:1d:b1:36:b5:e4:df:af:9d:77:85:89:2f:e2:
         b4:03:05:68:be:f2:56:c2:d1:4a:64:4e:6e:c5:da:0e:87:08:
         1b:5f:0b:b7:1f:c9:7b:76:0c:27:6f:e5:93:7e:85:3f:38:d2:
         08:33:b7:be:6a:47:87:a2:02:89:76:fa:31:2a:d3:ff:e7:f1:
         d0:e1:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----