Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          /gtcXJ3qnRRJtpWOWaULdhN19GY8GUJmrmwOITuOXyE=
Subject key identifier:   3B:47:EF:04:CC:CD:AB:55:BE:4C:D0:91:ED:5B:B7:3A:8A:D0:6F:F8
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       01962E995BEB1CBD1A8C35D4BC687B0DE46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          1346
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: 7e6XsgDgQCPFOWukxChbODQ58AgCMn0qV4sFsaUweS8=)
                          2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:eb:1c:bd:1a:8c:35:d4:bc:68:7b:0d:e4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=3b47ef04cccdab55be4cd091ed5bb73a8ad06ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:f2:f8:e3:ae:eb:d6:1c:ac:ef:51:fb:93:
                    bb:96:62:3e:6f:aa:cf:0f:67:1f:7e:cd:cd:51:df:
                    ef:6c:1e:4b:69:7b:a2:ae:7e:1e:46:72:d2:95:2d:
                    bc:c8:b6:99:29:20:79:43:d9:db:d6:93:88:a0:b6:
                    be:2d:06:ef:3c:61:a7:bd:44:8e:12:d0:0f:23:52:
                    76:11:69:97:18:d2:68:f2:9d:13:ed:b5:10:9c:47:
                    c5:f8:1e:c3:6e:66:ed:18:f3:cd:54:d0:65:9a:b8:
                    1a:2b:1b:98:c3:ab:09:47:cc:fd:5c:b3:1c:ca:de:
                    11:10:7f:84:94:d6:f4:a9:7a:45:46:02:7b:2f:46:
                    75:da:34:85:31:da:df:e3:aa:d3:f1:2e:a4:89:54:
                    4a:01:e3:ca:71:8c:87:44:79:12:46:b2:e0:e7:89:
                    eb:db:7f:1f:09:68:66:81:c3:8a:7a:8f:c7:d7:16:
                    dd:e2:21:56:3c:84:5e:d0:e0:9d:36:2c:5f:68:7e:
                    c6:4d:de:fd:19:64:04:05:1d:7b:83:a6:ac:7a:b3:
                    91:c1:33:9f:12:87:16:a7:ec:25:71:fe:d8:0f:06:
                    e9:82:0d:db:39:94:da:d7:57:bb:e5:cd:10:ad:52:
                    a8:0c:a8:c6:a1:d1:f1:2d:03:7f:6b:f0:ef:e0:a8:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:47:EF:04:CC:CD:AB:55:BE:4C:D0:91:ED:5B:B7:3A:8A:D0:6F:F8
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:57:03:d2:94:2d:52:b2:ec:f8:05:1d:f6:6f:7a:12:00:
         d2:7c:47:ea:e6:df:ed:6e:16:ed:75:6d:21:a2:0e:61:d3:45:
         10:33:b0:7c:35:9b:c0:3b:49:c1:2d:73:74:cf:48:62:0b:d6:
         73:ed:1f:67:1c:48:e4:10:d0:b4:72:47:bf:8a:db:5e:94:9f:
         00:a3:82:c5:e2:10:68:bf:69:0d:d3:2f:90:85:68:4c:8f:71:
         b6:d6:c7:c0:3c:a0:21:5a:ca:0f:db:f7:34:1f:0a:23:d9:80:
         f5:75:93:58:30:a2:14:c7:51:9e:7d:f8:ad:fb:dd:a1:66:9e:
         b6:66:a0:05:b3:98:cc:ea:94:1e:c0:2b:7f:93:2b:f2:b3:ce:
         14:3b:00:e8:5d:d1:8d:23:7b:9b:af:12:cf:4f:a9:93:91:e0:
         83:0d:57:45:4f:74:22:87:e2:12:97:73:ea:57:ed:e3:fa:52:
         3a:4b:6f:21:e1:28:39:50:0d:92:a8:2c:f7:96:83:b2:2b:55:
         79:f8:ee:fb:d2:a5:ee:5a:59:0d:e5:da:7a:b4:39:07:00:03:
         09:29:ee:ec:f3:44:b3:68:13:f8:78:3c:ee:ef:b0:9d:4e:cb:
         5c:90:79:c3:f6:3d:7e:08:ed:7d:63:67:56:9d:cb:7a:a3:0e:
         ec:2e:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----