Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File:                     S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier:          f37i2tWOof6x5UeahUmTqP/B4RdSo5QLLtVvpchKN84=
Subject key identifier:   16:0F:84:9C:26:41:47:76:19:15:24:D4:35:C7:96:19:CA:92:49:31
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer:       /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial:       01962E61BC48CD06A5FDC22F28A1B68BE95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number:          13BD
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: i2OhJ3XHLGbsm4ETOxp+XweOJAOCteERpWZn3pGHTfY=)
                          2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bc:48:cd:06:a5:fd:c2:2f:28:a1:b6:8b:e9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=160f849c26414776191524d435c79619ca924931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:66:1e:3a:8d:2e:35:dd:dd:ce:c3:40:3d:
                    a3:8c:54:f0:d0:cc:5a:5b:4c:a1:8f:17:43:e6:49:
                    d2:c9:dc:ef:32:fd:fe:b2:7f:8b:d0:53:68:4d:61:
                    e8:b2:23:74:1a:cd:13:48:5a:a4:26:44:54:0f:1f:
                    b7:0a:1b:fe:8e:ac:4b:56:9e:16:2a:71:d8:7a:64:
                    8a:fc:72:fe:53:7a:0a:5e:62:3a:95:ce:e8:52:9b:
                    2d:62:16:ad:07:6b:81:7d:51:96:87:92:51:f9:88:
                    5b:be:5d:63:62:f5:82:c3:c2:8b:28:4c:13:e4:57:
                    d2:83:8f:a0:9c:b7:7e:d5:cf:67:8d:56:c6:c2:bd:
                    f2:25:38:95:99:2a:b1:d7:66:bc:b5:e4:6a:ab:7d:
                    71:ad:fb:10:59:bd:ad:52:05:f0:79:08:e1:ca:de:
                    40:a4:e5:c8:ac:99:e8:c0:b3:d0:0e:81:1c:bc:0b:
                    23:4c:af:94:30:63:32:f2:fb:6d:27:23:a2:17:60:
                    f3:ef:21:ff:6c:0b:32:63:10:c3:d2:70:cc:29:5a:
                    ea:95:72:52:80:7c:b8:05:a3:cb:ac:04:39:26:56:
                    16:9d:ba:41:12:60:dc:77:64:69:7b:bd:49:01:86:
                    47:9a:3c:87:9f:a8:b1:99:22:c4:36:96:b0:5d:31:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0F:84:9C:26:41:47:76:19:15:24:D4:35:C7:96:19:CA:92:49:31
            X509v3 Authority Key Identifier:
                keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:10:b3:2f:8b:ca:11:ba:c2:6a:db:e3:65:c8:05:ca:b9:
         81:41:d8:98:de:19:18:76:96:7f:65:cf:05:a8:47:15:36:1d:
         7c:ad:84:45:21:b9:16:de:5b:28:ab:7f:33:b2:44:74:fc:21:
         6d:f9:9d:34:02:84:0b:cb:c2:ce:ff:9e:84:99:e4:c8:db:6c:
         df:4a:b3:70:ef:2f:84:4c:83:ea:98:6d:8b:cf:3e:4c:03:c7:
         38:38:b6:e5:a6:16:bf:d8:ce:43:a6:23:5a:68:f9:73:15:ec:
         06:db:d8:59:1a:89:a7:f1:c4:9d:21:c3:1c:9f:e9:22:a6:f6:
         e7:87:76:dc:3b:40:65:c4:b2:24:8d:ca:f6:2a:4a:33:be:2a:
         db:fa:30:16:8a:ab:be:bb:b7:17:93:ff:bf:72:a4:32:b3:8e:
         ad:b8:a6:41:99:e3:f4:95:9a:7f:da:9e:30:be:58:68:52:bc:
         7d:3d:96:06:7b:57:bf:79:a2:7f:56:23:39:bb:8c:7d:ab:0e:
         ce:92:d9:76:eb:5a:bb:3c:ef:25:5d:19:43:6b:9d:af:17:15:
         3e:fa:13:5c:3a:7a:c0:f6:bb:5d:aa:59:59:15:bc:9a:0b:ab:
         43:84:36:c4:a3:ec:6c:5e:a2:d9:fb:c3:bd:2d:95:19:f8:13:
         f1:68:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----