Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File:                     sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier:          0LCrQCXRxl0T3iiZaAAh9c08n88AHbGUQL/7AyeuGS0=
Subject key identifier:   DB:B2:F0:17:DF:74:77:8F:79:F5:D7:44:29:8B:49:C3:0C:9F:D3:25
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer:       /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial:       01962ECF9026978A2EB33B3310B3A1090A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: 3cycWHQbMZJt2WMh9bLV3UNKxSmbF2+ezrQXuMTURR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:26:97:8a:2e:b3:3b:33:10:b3:a1:09:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=dbb2f017df74778f79f5d744298b49c30c9fd325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:5e:da:e4:37:52:f5:70:da:29:68:56:f2:
                    d2:42:6e:5c:9d:37:21:3c:43:8f:9d:e4:b5:4e:1f:
                    a6:bf:63:28:b2:49:d3:51:14:2f:9e:96:34:9e:e1:
                    1a:e9:f8:e8:62:28:e2:19:4b:3f:28:3a:58:04:45:
                    7e:38:01:77:0f:d7:3c:92:19:a0:42:4b:ce:5f:26:
                    16:cd:b8:0e:e3:0f:0f:e8:d1:da:a9:73:15:c5:a3:
                    4a:f7:ac:59:9c:1a:ae:fd:78:d1:6f:9e:20:b3:cd:
                    dd:98:f3:26:9d:1d:6d:17:68:ac:dc:a2:8e:78:9b:
                    5a:1f:fb:45:b9:37:c4:87:09:62:02:a2:de:57:58:
                    02:4a:c9:b6:08:ee:05:1d:a3:c1:08:18:55:b8:ce:
                    72:af:4d:0b:bc:cf:c2:23:76:2b:52:4b:10:c9:f4:
                    b2:67:6d:d0:ff:49:0d:e7:d8:5a:41:9b:80:d4:53:
                    a0:74:60:a7:12:22:5c:53:5e:7c:30:0b:b6:a0:83:
                    d9:48:34:20:26:57:2a:98:3e:82:2a:84:bf:5f:77:
                    14:e9:c6:64:ce:0b:2a:3c:77:49:f3:b2:c5:3c:bf:
                    70:0e:25:6f:f8:24:9d:16:25:88:4d:a5:be:be:0c:
                    b4:3c:d5:24:da:b2:75:b1:ed:cb:bb:35:07:c3:28:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B2:F0:17:DF:74:77:8F:79:F5:D7:44:29:8B:49:C3:0C:9F:D3:25
            X509v3 Authority Key Identifier:
                keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c1:69:06:54:63:14:b5:ac:fe:65:64:68:b9:2e:32:2e:9d:
         db:04:ac:e3:53:83:94:37:0f:d5:6b:22:46:d4:8f:a2:a6:92:
         1f:e1:e9:d7:a0:03:12:5c:2b:55:1e:83:f5:05:fe:b9:b2:a9:
         54:26:22:db:af:65:de:9d:a1:99:6f:30:f7:38:1e:b4:2e:97:
         4d:f0:4c:b6:2d:23:53:49:ec:5b:28:4d:e7:3c:f3:61:df:e7:
         be:9b:18:f2:fe:53:7d:dc:66:96:d4:06:50:85:6d:d1:6d:96:
         1c:39:b1:93:43:f6:b7:14:ba:99:18:2f:b7:b6:91:fa:53:ae:
         f5:10:b7:3a:ff:b8:ef:4d:9a:50:b3:02:be:6c:0b:2b:c1:a9:
         71:6c:12:ad:96:f4:09:93:5c:eb:d3:00:3c:26:d4:dc:42:b5:
         90:27:a0:3c:88:bc:d5:a1:c5:60:9d:97:08:95:38:27:bf:8e:
         a7:13:74:1c:eb:c3:46:fc:58:73:0a:14:9d:2f:af:6a:b0:63:
         b2:42:70:3f:2d:cc:1a:bf:48:d5:05:34:a3:d7:0c:30:40:87:
         bb:f2:f5:c8:67:0b:74:fa:1a:9a:1f:f3:71:69:41:a9:63:9c:
         cb:57:41:18:50:f6:a7:34:f4:9e:ab:63:e3:6d:24:9d:56:96:
         5d:5c:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----