Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File:                     sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier:          hSXW4fkPnArutKKptDqtnAb4Z/332989N3LFE4FJ+fA=
Subject key identifier:   9C:42:74:AB:A8:70:03:6F:33:06:07:4C:56:F1:03:CA:88:98:F8:33
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer:       /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial:       01962F74CF13F052EEE6E4B7DEC2742199CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number:          0C4B
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
                          2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: qDHoLYaY0To5hINBynaYO38UQp2kVOiegrlgyqz0urs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cf:13:f0:52:ee:e6:e4:b7:de:c2:74:21:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=9c4274aba870036f3306074c56f103ca8898f833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:9d:30:e6:2e:33:12:2c:2e:ce:0e:e3:b9:
                    61:0c:10:a4:92:27:90:63:b1:14:6c:8c:09:72:62:
                    30:10:df:d1:46:3a:61:34:f7:44:df:ee:9f:c0:4b:
                    41:92:b4:9c:7e:53:62:e2:cc:1f:be:b6:97:44:2d:
                    0f:d1:26:cf:e0:38:fc:08:cc:3c:8b:d9:90:49:75:
                    f5:a8:b1:ab:6c:55:4f:85:73:73:9d:fb:0b:c5:c6:
                    e7:4e:a8:eb:fe:4c:a3:34:83:13:3d:a2:d6:96:42:
                    3e:69:ad:7f:e6:92:ad:5e:fd:20:7e:34:5a:0f:50:
                    8a:34:27:79:56:29:b9:38:e6:94:69:b2:f9:2d:93:
                    53:fc:6b:52:d4:7c:bd:eb:c1:83:65:e5:54:74:66:
                    a6:da:2c:99:63:79:3b:fb:51:27:d1:8b:03:42:da:
                    99:32:9f:99:c3:6d:bd:c8:08:b7:e3:d6:3f:cf:64:
                    b0:30:ec:d2:67:c0:f7:ad:ca:95:54:41:e1:12:b6:
                    f1:bd:99:33:52:91:94:d6:2d:d3:39:7e:e9:13:04:
                    2b:38:a5:81:b6:05:85:6e:2a:a4:43:13:af:56:53:
                    2d:fa:30:4c:59:fb:8b:fc:24:0f:09:e4:6e:2d:f8:
                    29:f3:2a:b2:cc:01:f7:74:f0:ca:e9:26:41:e3:40:
                    ec:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:74:AB:A8:70:03:6F:33:06:07:4C:56:F1:03:CA:88:98:F8:33
            X509v3 Authority Key Identifier:
                keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:cd:9f:46:e8:37:21:94:1a:c6:35:7c:85:c7:cd:27:8d:
         4b:c6:0a:3e:b5:9b:e1:79:3c:ef:ed:ca:a1:07:22:6b:cb:87:
         8c:48:f1:ae:18:03:f6:9d:38:1b:82:ef:e4:61:32:ac:dc:cc:
         5a:57:b6:cf:dd:45:00:c4:af:7b:c5:a3:24:c4:c5:3c:89:dc:
         a1:b7:a5:e0:fc:28:46:6b:0d:8c:1a:c2:20:10:bb:b8:73:c7:
         90:23:fe:7f:d3:4e:89:7a:6f:1d:c9:d6:b8:8e:f5:a3:bc:7d:
         b2:e0:cc:78:b7:d9:6e:c1:c6:3e:76:55:78:45:d1:f1:03:46:
         cd:c3:9a:17:98:75:02:ca:d6:b0:3c:27:bb:4f:59:97:36:38:
         83:fe:37:eb:f8:ee:2b:44:b8:98:02:d4:06:95:dd:8d:1e:a3:
         25:f8:a8:24:45:ab:09:76:b3:67:48:95:e0:9f:77:3b:9e:e1:
         98:6a:14:82:58:49:9c:38:92:66:f9:33:3a:6e:dd:2b:71:41:
         35:12:84:5e:44:d1:f9:e9:f5:d6:55:fe:91:9b:14:49:b6:4d:
         68:c3:7f:53:c3:03:2d:60:f0:f1:81:ac:a0:ea:da:c0:a4:c8:
         e6:47:57:90:c5:94:ee:b6:88:d5:26:9a:bd:25:6d:02:e7:1c:
         e5:f3:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----