Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          ci0velMfQwQj3Wlt+/l55Suva9u0W80TNchG7zL/epQ=
Subject key identifier:   60:4B:BA:62:43:6E:51:C9:DD:31:A4:E1:EC:FC:76:00:54:24:6B:F5
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       01962FAB16CE0A52BDDDFEC64F774FC74F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          07A8
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=)
                          2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: ZvaxNcCHaOGHnsF0osJCws4iSakbN/LH5zk7UqRQOMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:ce:0a:52:bd:dd:fe:c6:4f:77:4f:c7:4f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=604bba62436e51c9dd31a4e1ecfc760054246bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:ea:c2:05:8a:cb:75:53:80:fd:67:7c:9a:
                    d3:66:ac:7e:55:f4:20:94:4b:d6:a3:90:84:e6:2a:
                    af:4f:cb:18:47:fe:6a:74:4e:85:03:4c:26:bb:8e:
                    bb:30:89:41:40:ce:85:28:2e:3f:e9:04:2e:26:a5:
                    98:b5:0c:09:91:21:50:07:fd:38:da:fd:b5:5e:7e:
                    87:08:24:47:63:42:0d:39:05:0c:02:ca:bb:16:a2:
                    56:26:85:ab:21:d9:7e:4a:6a:0d:49:59:8f:66:f4:
                    cc:d6:19:ee:e6:92:c8:e0:60:a6:ad:d0:e4:65:02:
                    2c:7a:71:1f:e7:92:d1:8a:4f:00:21:64:78:0b:6e:
                    9c:df:2d:f2:13:7d:1e:0e:0f:d8:1f:58:9d:06:e3:
                    43:f2:98:fb:0b:6d:d9:af:7a:2b:7e:41:64:39:d0:
                    38:f7:24:3d:84:6d:83:f0:03:a6:aa:44:62:f3:74:
                    da:a8:e2:a7:af:fc:34:40:b7:45:f3:ab:40:e6:1c:
                    85:79:e3:f4:65:86:33:15:5b:5f:48:19:36:60:ba:
                    ad:f0:ce:ba:67:95:0b:fa:1a:29:09:fe:86:d8:ee:
                    f5:f8:36:d0:34:77:ea:fc:dc:c2:02:de:72:2c:e1:
                    62:19:b4:13:67:07:3e:20:dc:ec:fe:fe:3e:77:90:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:BA:62:43:6E:51:C9:DD:31:A4:E1:EC:FC:76:00:54:24:6B:F5
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:57:fa:6b:a7:cc:76:b5:23:b0:fd:0e:12:ab:f4:26:40:
         3f:ff:14:8d:eb:4c:72:4d:5d:96:67:58:f9:df:a7:35:50:42:
         a6:a5:99:a6:25:af:aa:08:53:b7:78:ac:6b:5e:37:39:1c:da:
         70:3e:4a:ba:c1:73:1c:55:2d:c2:fd:28:d6:9b:de:80:1a:63:
         0e:17:00:e7:4e:fa:cb:44:a6:0c:fe:38:8d:fd:7f:b9:4f:19:
         ce:b9:b7:17:21:53:00:57:2c:72:e4:bb:62:42:01:67:30:81:
         2f:58:d8:72:a7:5b:ff:6c:63:11:05:b0:3c:00:5f:12:05:12:
         4d:5c:0c:48:ed:f4:c5:03:31:5c:23:88:94:fc:92:fb:2c:6b:
         ff:3a:b5:47:6e:b7:4a:0c:ba:94:e7:e3:5f:f0:44:f3:fa:e1:
         59:10:40:82:50:b5:16:81:43:cb:0e:12:0d:db:4d:58:73:86:
         39:7a:c1:f1:25:ba:3b:aa:a7:6a:41:96:b5:cb:bb:5f:1d:90:
         31:b0:d3:0c:80:05:40:8a:32:54:56:b5:b9:50:97:59:4b:5a:
         8f:a2:be:6b:55:82:0e:d4:05:e9:56:c0:ec:b6:40:b5:45:3b:
         15:f8:34:42:9e:a5:4d:44:cc:c5:a4:46:00:c4:4b:01:21:2e:
         73:1e:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----