Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File:                     slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier:          GmToZUGparZC4EIdvSpxsgWC6y5CqE29TFfouNXbT2U=
Subject key identifier:   06:50:D7:A1:C9:26:CF:7F:8C:A6:0C:8E:53:F4:59:26:2D:65:F1:EB
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       01962E61E2368BE4A918654AE783BF5B0BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 1-yGyAb5aLCteBw1IK7px8umPM0E.roa (hash: sbk/bLa9eBvitwUvY7P4OBh7ripskQi0SoXdYbLT94o=)
                          2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: guEswMqr+pSo0soLLe1UzmauEN+XFXMW4HalVVqDKSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:36:8b:e4:a9:18:65:4a:e7:83:bf:5b:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=0650d7a1c926cf7f8ca60c8e53f459262d65f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:b7:82:91:02:fd:7a:0b:da:e8:cc:d5:da:
                    9c:d7:5f:d4:29:aa:85:da:b4:c4:40:45:e0:68:1f:
                    c8:ca:e5:2f:69:95:04:b4:d4:cf:e6:56:0e:e0:db:
                    de:d6:4e:6c:35:2d:0b:6d:0b:14:ce:02:44:01:ab:
                    fb:45:c4:0e:08:f3:34:1b:5f:2f:89:0d:05:b1:9f:
                    0b:8f:e7:5a:17:9c:89:1f:c5:4d:20:29:30:af:bd:
                    8b:3b:9e:01:69:ae:a7:e6:1e:cb:51:71:9e:d4:ca:
                    0e:b2:90:24:be:00:01:79:a4:c9:2e:67:d1:1e:88:
                    a0:da:79:9f:03:7b:24:ab:04:35:7c:05:6f:16:d2:
                    17:51:b3:87:0c:96:aa:4b:21:40:92:cd:c3:5d:d8:
                    f0:7f:94:53:4f:d2:d9:94:b9:96:24:43:1c:05:c7:
                    75:bc:f9:c8:ad:2b:ab:16:29:f7:bb:9a:c9:62:fd:
                    5e:65:8d:cb:81:b6:04:ac:81:3f:cb:b8:03:05:78:
                    44:0b:29:06:52:41:fb:b3:75:fc:f9:0b:2d:a1:25:
                    00:16:81:97:60:20:ed:d8:ac:fb:9b:8f:6b:3e:7c:
                    6a:65:7c:62:d4:0b:a8:42:b8:14:71:5f:0d:8e:9f:
                    b7:25:db:cb:e4:c2:94:41:7b:e6:91:e4:11:d4:43:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:50:D7:A1:C9:26:CF:7F:8C:A6:0C:8E:53:F4:59:26:2D:65:F1:EB
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:12:f8:0f:22:87:29:68:de:16:a3:93:9f:0a:62:39:58:
         7d:3c:38:04:a7:41:fc:99:94:06:ef:4b:9f:30:44:b2:ae:fe:
         14:65:3b:13:f5:f4:73:8c:bf:54:75:ed:83:e1:b5:7d:5d:97:
         89:59:00:a4:39:d6:12:ab:0c:88:5a:e0:eb:74:03:84:25:0c:
         4f:6a:5d:e0:c1:fe:a9:3e:e8:4d:da:cb:f9:e9:b7:20:5b:63:
         19:50:fb:0c:ff:db:67:68:6c:0e:45:a6:7c:61:54:bc:fb:15:
         16:fd:b5:cd:8c:fc:e5:c1:24:a8:c6:f0:aa:60:5b:7e:68:4c:
         c9:09:ca:11:77:f9:23:8d:61:f0:c1:ab:11:b7:b8:b3:5c:db:
         b9:a1:ef:6c:44:f7:76:bc:34:60:ca:3a:b0:ac:20:68:11:7b:
         16:92:74:37:2d:ee:8f:41:0f:37:5b:45:40:ef:64:54:dd:74:
         f2:75:ef:c7:3c:ea:b8:a7:4e:00:95:a1:57:7d:6c:d0:45:ce:
         87:42:3c:84:4d:ef:e1:0f:bd:85:8f:c5:f0:27:84:45:0f:ff:
         0d:0a:4d:5d:99:a1:b5:71:fb:60:7b:14:7e:08:b7:67:4f:b8:
         86:52:b1:92:b3:c0:e2:8d:b7:05:4e:41:ed:d0:03:7b:04:d1:
         88:f4:a7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----