Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File:                     sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier:          61NSNURDozZMyFDZXsgVQHR1kOAeU5XLTB23Ybf8t44=
Subject key identifier:   AD:AF:0B:FF:A8:BC:01:19:63:76:3B:B7:BA:BB:F5:55:7F:8E:92:99
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer:       /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial:       01962ECFBFB971895DBD6F394A925B9E866B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: wbXJMbg0T6tcvUhbhuS0quyfYuuJ8aJHGvJgYkmnHRA=)
                          2: xgKcu0KPsxc8M315Trs0GW1UUwk.roa (hash: ICZ6+2Jz2veLFc1cLdSpid822PA3P/5mVBK8JthGSW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bf:b9:71:89:5d:bd:6f:39:4a:92:5b:9e:86:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=adaf0bffa8bc011963763bb7babbf5557f8e9299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:8e:fe:60:2b:de:c7:1d:98:9f:98:7f:74:
                    38:50:b6:68:d2:38:93:02:ca:e1:11:9e:8e:8e:78:
                    da:ed:2c:e4:f8:2b:27:d7:83:31:1f:b4:2b:bf:d2:
                    de:cf:f9:9f:db:9e:1d:b7:b8:20:0e:a4:fc:e3:34:
                    bd:8f:1b:a9:8d:7d:40:ba:40:4b:2f:ab:9f:4f:ec:
                    8b:a9:9c:90:d2:01:1a:7b:d0:f2:1c:5e:7b:f9:31:
                    e1:5d:c1:c5:bc:0c:a3:f5:34:90:8f:93:89:2c:ef:
                    25:cb:25:be:62:88:9b:3f:17:cc:79:b7:26:ea:91:
                    51:42:9c:44:53:55:29:bd:32:4f:83:72:10:04:c9:
                    92:5a:42:dc:34:6d:dc:d7:3f:3b:a2:9d:53:e0:5a:
                    6f:3b:02:79:61:08:18:7e:ac:3e:19:7d:90:d7:e1:
                    4e:bb:12:9d:4d:9e:45:ac:1e:25:93:0a:bb:ac:db:
                    b0:d9:db:7e:69:35:8b:13:62:55:7a:77:c5:38:89:
                    b5:37:24:e5:54:52:ed:32:ac:6f:06:72:5c:88:55:
                    e3:8c:4d:e1:48:b7:1d:45:b6:d5:69:ee:7e:9c:26:
                    62:92:75:b7:df:5c:f3:fe:82:ff:32:ce:e1:56:8e:
                    8b:f5:94:51:e7:9b:f2:1c:8d:64:99:cf:91:49:af:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:0B:FF:A8:BC:01:19:63:76:3B:B7:BA:BB:F5:55:7F:8E:92:99
            X509v3 Authority Key Identifier:
                keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:01:c8:d8:dc:a4:17:1d:a1:3f:e6:84:36:a2:8b:1f:75:11:
         92:43:2d:c2:b9:cb:0d:a3:a7:cf:95:65:b7:9c:ff:51:e8:a7:
         72:b9:0d:a7:86:5f:a1:82:90:dd:b7:5e:1b:03:d7:dc:56:75:
         e1:a1:3c:c4:b3:dc:87:77:96:c7:7b:74:7f:e3:1f:04:81:cb:
         66:0b:e3:60:5c:b2:6e:90:fa:66:e5:e5:f5:05:12:ee:70:2d:
         f6:2f:b6:3c:c2:47:f8:2d:86:3f:8b:36:0e:a7:a8:69:01:0e:
         ca:0b:30:c0:89:8d:74:24:de:3a:37:35:c6:4e:a9:ce:38:7e:
         15:54:48:f2:b3:82:03:0c:3c:d2:d1:d2:5c:30:5b:00:74:ee:
         38:32:7a:87:32:f6:0a:90:ae:57:fd:60:91:43:90:d1:d1:52:
         8d:74:78:de:d3:68:7b:68:ed:5a:4e:d5:06:84:72:39:40:58:
         7d:8d:89:a5:94:c0:c3:78:a4:be:58:e2:cd:9f:78:7d:15:0d:
         70:65:4e:f2:f4:9a:02:4b:ff:5c:69:78:35:7f:d1:38:4b:aa:
         93:51:92:d8:4a:20:8e:e1:56:c7:7d:c5:47:e3:f2:ae:ad:22:
         69:5e:af:9f:a7:31:43:6d:51:af:2c:76:61:92:3e:b3:d2:31:
         96:f4:32:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----