Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File:                     RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier:          9xlOF9XXQckyYkDFS+IkUfwKif3eZUN2Fg0sP7g+ogo=
Subject key identifier:   34:33:07:D9:86:50:12:EA:86:13:25:40:25:AF:CE:D6:4B:13:30:B5
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer:       /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial:       01962E619D9311C8C00E385657E3725DC5F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: T82ofvLWHWWWbH6y3d3vqVxZ/47if12qaY0LDb7ft6I=)
                          2: Vf-4CzJnj-smUTzjUooDn_4kp38.roa (hash: wRrMrbdEgCzD+5xjbPsOA1jPdBf/YtdoCbQDeiSm5vU=)
                          3: si7sAmrI6LhMmBgdITfIkRaacMk.roa (hash: ySGkQgyQXdPJ9MCG+8CkylC78C7W6u0+iUG1Hsa05U8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:93:11:c8:c0:0e:38:56:57:e3:72:5d:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=343307d9865012ea8613254025afced64b1330b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:ba:c7:cc:63:43:31:4c:a2:4d:fa:68:68:
                    5f:88:e1:5d:11:10:6c:f7:64:9b:4f:56:53:f9:61:
                    7e:2e:e6:1d:79:ad:a8:0a:ce:ce:33:19:12:c4:83:
                    db:9f:ea:29:b2:ff:06:ac:31:f4:33:a6:4d:cd:24:
                    7d:c5:96:72:e8:03:b6:49:61:e6:a5:fa:5e:52:d4:
                    4e:4e:76:73:d6:86:91:a8:30:23:c5:f4:3e:68:c9:
                    be:f3:a9:98:25:b2:63:66:2c:3b:01:d3:af:9b:af:
                    74:f3:b5:bc:43:11:fb:df:cf:86:ae:0f:76:a5:58:
                    17:e0:af:6e:ba:02:d1:10:e7:18:18:07:8f:71:56:
                    6e:c8:35:c9:63:d8:5e:3b:6b:c4:b5:01:35:84:24:
                    95:21:f6:e6:29:89:fc:48:5b:18:2e:57:91:cd:a3:
                    35:c6:77:b0:b4:1a:b9:0d:07:ac:b4:bf:e7:6d:21:
                    f2:35:5b:81:ea:a1:b4:aa:de:58:e3:94:de:97:9f:
                    ae:7f:a7:61:4b:a8:6c:56:7d:fe:51:53:94:38:f1:
                    bd:1f:84:f2:f9:68:dc:da:db:d5:c0:97:89:2d:9d:
                    69:70:d7:bd:73:0c:01:a0:92:05:cc:9e:ad:b6:b1:
                    ba:3a:29:d0:22:5d:08:97:aa:3b:44:64:46:c0:22:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:07:D9:86:50:12:EA:86:13:25:40:25:AF:CE:D6:4B:13:30:B5
            X509v3 Authority Key Identifier:
                keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:d8:65:d7:cb:60:71:0f:a1:27:5e:f4:72:48:a1:3b:05:
         51:6d:8b:30:8f:f6:0d:67:de:49:e0:ba:37:77:2b:ef:7d:f5:
         b6:4d:c9:9e:7a:aa:0d:81:12:22:6d:56:d5:a1:7e:99:af:5a:
         07:00:9f:4a:6b:da:f5:2a:48:07:55:77:52:01:5b:f0:2f:0e:
         2f:ba:31:13:8d:41:bf:1b:ec:9b:dd:82:8c:dd:55:30:de:fd:
         4c:dc:f6:99:aa:51:61:e2:41:bc:3a:06:60:4c:fc:90:3b:73:
         e0:2d:bc:64:75:41:2e:45:4f:15:9d:36:90:a6:71:2a:f0:a6:
         b6:60:93:1b:7e:7a:ba:66:32:a4:72:84:54:80:83:1e:54:e1:
         cb:c2:72:ce:ae:0b:51:52:a5:ab:ab:ea:ea:18:3f:b8:2f:55:
         89:28:bf:bc:43:a1:71:a4:4b:ff:41:48:c3:ed:6d:54:89:b4:
         ef:75:ce:55:12:3c:53:62:d8:73:c5:36:f2:b8:3d:ae:0d:ea:
         ec:71:97:de:fd:65:60:19:19:cb:44:bc:27:da:ac:fa:ea:c9:
         4c:4b:67:4d:69:4f:3e:c1:9e:26:6b:5a:e4:ef:33:08:e8:d9:
         ac:fb:b1:09:4b:4e:d5:f4:52:3b:dc:f1:33:43:2b:2d:60:c3:
         8b:df:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----