Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File:                     snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier:          Xbhlx8N8B/nNgpipkUjg/p5002iSB355yRvVjlgO3pY=
Subject key identifier:   88:6B:2E:C1:A5:0F:DF:AF:A6:82:6E:DE:4A:85:B2:94:28:96:51:DD
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer:       /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial:       01962F3D42C7DC9E816138C0F93BB48F18C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number:          1086
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
                          2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: OzEamLyjo2xqqUgaMRpkPP2FznLcE1kYryWD48chJOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:42:c7:dc:9e:81:61:38:c0:f9:3b:b4:8f:18:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=886b2ec1a50fdfafa6826ede4a85b294289651dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:44:ef:43:1e:82:8f:98:04:d5:ca:b5:20:
                    c1:d5:76:cd:3b:c1:43:1a:df:8f:4f:fd:d7:e4:d3:
                    53:7f:f5:dd:5e:19:0e:18:72:96:c0:bf:cd:bb:a2:
                    c8:ec:8a:af:24:0e:dc:98:f6:32:18:4b:13:91:5d:
                    40:53:df:89:8a:fc:31:7a:b1:e7:5f:9f:eb:5c:70:
                    00:7d:6d:91:03:e8:1f:3f:38:89:ad:7b:31:c8:7e:
                    91:5f:b8:2b:d3:9a:36:39:c1:79:3c:10:3d:60:32:
                    ad:49:e7:ad:aa:83:69:e5:e2:1a:bb:86:4d:01:7a:
                    16:d4:c1:04:02:54:19:b3:bc:04:89:8c:97:7d:6f:
                    fa:6f:26:1a:e7:d7:4f:f6:b1:52:66:51:a4:4a:3e:
                    e2:e2:be:82:c0:0b:b5:8f:5d:82:78:08:99:93:15:
                    e9:25:a0:c5:4f:7f:ed:9a:4d:3b:c2:8e:73:e2:d9:
                    16:c7:52:d0:d9:47:95:09:77:78:05:53:e2:31:bf:
                    1f:4f:3f:2f:40:7f:3a:fd:ec:7c:14:bd:fe:05:bc:
                    7a:d5:1d:b9:00:aa:b1:aa:49:4e:01:95:dd:a6:a4:
                    51:22:97:e8:6d:92:69:4d:12:bd:91:c7:ee:46:ee:
                    95:9f:13:3a:84:31:10:11:70:85:c9:b5:20:f1:ae:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6B:2E:C1:A5:0F:DF:AF:A6:82:6E:DE:4A:85:B2:94:28:96:51:DD
            X509v3 Authority Key Identifier:
                keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:21:d9:a6:54:c2:12:3b:bc:e9:76:92:ac:4f:38:28:cc:29:
         59:ae:0e:7a:b0:0e:48:04:4e:e2:5d:46:db:83:8f:44:c7:a5:
         48:97:54:6c:6c:1b:c6:64:3c:e4:7b:bb:4c:33:7c:22:9b:4c:
         07:fa:19:cc:91:67:ad:86:77:ff:79:eb:90:8e:04:90:49:c7:
         69:f6:71:55:0f:5d:9f:04:bd:b4:31:8a:40:61:64:e6:19:6d:
         19:c7:3d:c0:6f:3c:09:c7:ec:8d:54:fa:d1:fa:63:b0:58:6d:
         af:86:c1:d5:e5:f8:68:87:03:0f:69:76:6e:8b:91:20:44:78:
         1e:46:7f:f9:50:ca:d5:c5:ee:af:88:65:e1:44:b4:1f:03:d8:
         65:ed:7a:f7:1f:f0:17:ee:0f:ce:75:eb:31:74:1d:1e:1d:f2:
         5e:f7:d7:f4:f1:07:3c:19:a2:c3:d1:31:b9:3d:58:78:7d:0e:
         6b:6b:94:ad:d7:93:d5:aa:4e:41:fc:e7:6d:29:f9:a8:88:77:
         e8:a3:3a:5f:4c:ac:11:c8:d9:be:ea:00:22:c4:1c:00:dc:f1:
         cf:b7:58:69:3c:9d:c5:a6:01:aa:82:ea:21:e3:c3:2f:c7:41:
         4a:62:fc:c9:36:1b:ae:42:48:ee:7b:d5:b9:76:55:07:4c:64:
         92:9a:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----