Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
File:                     SkcTzDG36jiRvhRV3hHcwvMp1RU.mft (raw, json)
Hash identifier:          w7Z2a1MRv6N8w9ggLdt4zm5ypwGmpgShe2ZoAuRxwK4=
Subject key identifier:   5A:83:33:76:7F:CF:21:F2:50:D3:ED:DB:77:5F:49:CC:8C:5C:DE:BA
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Certificate issuer:       /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial:       01962E61B99F801EB6800F40662E28E6ECF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
Manifest number:          0B74
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: SkcTzDG36jiRvhRV3hHcwvMp1RU.crl (hash: 0bI6zGV0rpn6iNElol1ujsBoX0LEQIp+LjDlWbAvlgo=)
                          2: gF8ZN3C0a45HX0BtFSTg6shwTi4.roa (hash: YzHFKuHmdK7saGrTnv4LM1NaquoFvehSW3aShl6a+YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:9f:80:1e:b6:80:0f:40:66:2e:28:e6:ec:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=5a8333767fcf21f250d3eddb775f49cc8c5cdeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:16:01:1e:c9:58:b7:2a:4d:e3:74:af:9a:
                    64:11:0d:9e:8e:b7:4f:5a:54:ed:f5:2c:42:78:0d:
                    a2:ef:6c:0b:64:3f:2b:c1:6c:e0:fb:5f:d0:7f:e3:
                    14:f2:9f:5a:37:b6:ca:76:14:f7:dc:3d:8a:48:08:
                    70:5f:2e:96:6a:47:8d:85:4c:e8:ad:76:c4:7a:c6:
                    74:4e:a3:c7:3f:80:32:6d:68:3f:c1:4e:6e:7b:ee:
                    3d:d7:fd:a2:25:d7:b9:bb:9b:5a:d9:69:60:83:9c:
                    83:44:9c:1c:b7:7f:c7:f2:b9:44:70:36:a9:60:f7:
                    17:b1:b9:6c:0b:62:ff:4a:f8:92:b1:cf:5d:b4:27:
                    31:4f:5e:d2:15:e7:93:23:da:ed:a5:76:31:a3:23:
                    50:5e:4f:52:f7:67:12:94:ec:8d:37:f9:5c:2b:ea:
                    6d:8e:aa:51:0b:d4:6d:c8:52:79:16:15:6b:b2:31:
                    be:d0:b2:45:f1:fd:57:97:04:ad:e0:06:c5:1d:74:
                    28:62:fc:7a:99:6f:4a:3e:86:e3:47:bf:cf:5c:24:
                    d6:d4:10:41:f5:ff:3f:58:da:bc:bd:dc:56:45:88:
                    1d:26:29:0b:67:14:f7:71:ec:ab:45:2d:ff:00:26:
                    39:2c:57:f5:14:8c:61:02:fd:c8:e3:3f:16:56:57:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:33:76:7F:CF:21:F2:50:D3:ED:DB:77:5F:49:CC:8C:5C:DE:BA
            X509v3 Authority Key Identifier:
                keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:17:50:b7:d4:99:7c:17:fe:39:ac:72:bb:56:a4:3e:72:
         29:04:92:0b:c3:6b:5d:28:fd:ef:03:96:c1:0a:cf:af:30:9e:
         35:0f:98:21:cd:d7:30:47:3e:ab:06:9f:78:f0:38:71:a0:68:
         50:35:45:73:17:08:f3:b8:b9:6a:ec:39:d7:58:6e:12:46:af:
         4b:de:df:ff:d5:71:f6:2b:f3:7f:53:0b:87:46:20:9e:55:7d:
         cb:ca:1f:94:89:c2:1c:c1:40:3d:a0:0b:fe:1a:b1:b3:57:68:
         a9:f5:2b:92:51:4a:9d:34:37:59:2d:50:3e:06:fc:b3:78:ee:
         1e:fd:ce:25:8c:00:bc:fd:93:44:71:34:87:07:d8:89:7f:79:
         de:2c:1b:27:c9:92:36:f2:e6:89:e4:13:de:5e:c6:b6:ec:b6:
         dc:05:34:e7:2a:83:d1:c5:50:32:1a:c2:4c:00:67:18:b2:11:
         05:8a:50:8c:31:da:51:64:96:52:69:c3:20:1d:bb:82:40:86:
         3b:6e:ae:fc:08:d0:44:8e:e5:6e:84:fd:97:da:82:76:13:1e:
         d2:76:79:95:25:19:7c:6e:17:cb:30:cd:ed:40:39:2a:c9:e8:
         73:13:86:90:0a:7b:fd:96:f8:4f:a4:01:54:ee:89:fb:7b:fe:
         f8:29:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----