Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
File:                     Skati1EM9VlIXjYRVVuLQ571M7s.mft (raw, json)
Hash identifier:          RSohL7Nn7B3HLxydW5YUSKowgurqDCu2ecUMbgZdYT4=
Subject key identifier:   D9:6D:FF:F3:D1:71:5D:4A:67:FB:EA:68:E1:EA:73:13:FC:B1:17:87
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Certificate issuer:       /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial:       01962E2B01393FA0C2D73C34BE434BF0F938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft
Manifest number:          04CE
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: Skati1EM9VlIXjYRVVuLQ571M7s.crl (hash: yLWYA49xmbsb1RhBTT0wrT7aTJc2uOV8r8PDkKyvO00=)
                          2: YWHB5SFom3PZ1H1nBp8hYONydPQ.roa (hash: vl5j8Bemgq1rdDQ2l7TbBx5NbkCDljfvRSq6QiMNiQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:39:3f:a0:c2:d7:3c:34:be:43:4b:f0:f9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=d96dfff3d1715d4a67fbea68e1ea7313fcb11787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:4b:10:5f:89:aa:3f:67:9d:d1:d0:bb:f2:
                    2c:d7:0b:0f:89:75:d3:10:2c:25:0c:94:b7:7d:c2:
                    8c:40:60:dd:75:1d:40:c6:bf:92:88:17:57:c3:bf:
                    ae:13:2c:a5:7c:c9:a0:93:d7:5d:d9:29:17:ca:d4:
                    f5:3b:ce:f7:63:97:a5:9f:81:3e:98:a3:7e:21:31:
                    e3:a7:6a:99:94:33:9a:a3:cb:c5:91:ce:a2:d7:64:
                    60:51:38:c8:df:c6:56:9e:df:15:08:b3:5c:d6:90:
                    9e:9c:20:c0:9a:a3:0f:02:a6:3e:8d:f1:4d:f0:32:
                    3b:80:1f:f2:79:6f:b9:f0:8b:1c:3e:48:22:db:ab:
                    c2:c8:c5:69:29:4e:e5:3d:08:ef:df:39:fe:c1:84:
                    2b:ff:f4:98:d4:6a:e0:94:9e:c0:3f:7f:56:40:0c:
                    e7:6e:b8:e0:34:71:21:e1:2a:53:6b:22:b5:fc:90:
                    75:91:51:e0:90:03:a8:b6:e7:fd:37:38:a8:3f:6f:
                    ff:f8:bc:28:e5:ee:08:5a:a0:0e:a4:2f:09:c7:03:
                    f5:71:28:08:a0:9f:b0:ab:f2:72:da:77:3e:9a:b4:
                    af:72:b6:ce:70:df:4b:a7:62:9d:37:a0:e3:07:69:
                    9c:d5:f6:df:f1:3f:bc:3e:01:13:07:61:21:c7:e6:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:FF:F3:D1:71:5D:4A:67:FB:EA:68:E1:EA:73:13:FC:B1:17:87
            X509v3 Authority Key Identifier:
                keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:21:3c:ba:ae:f7:77:be:76:fd:b8:41:88:8e:40:22:32:9d:
         91:a9:cb:28:81:0d:34:cc:6e:3f:bb:8c:94:38:2c:e1:52:11:
         0a:05:6d:c3:12:38:79:e1:42:8d:3c:19:a2:ed:ed:05:9b:06:
         f3:04:5d:a6:ae:d3:94:7d:b1:5f:11:33:c5:8f:ae:a7:6c:2c:
         cc:4d:5d:22:b7:ef:16:82:0e:e6:12:22:1b:ac:12:21:74:c5:
         bc:61:2f:e4:fa:cd:18:5b:fa:e8:05:e2:45:6b:9a:96:99:2b:
         8f:99:fa:05:f7:8c:7a:dc:4e:91:40:44:77:62:62:01:6f:34:
         7b:ac:92:db:9e:d7:50:30:ff:4b:c5:68:64:72:06:68:01:c9:
         35:53:48:5c:11:f9:af:00:28:7f:bd:ed:f1:5b:a5:8d:f7:03:
         64:08:9b:fb:6d:71:f5:b9:0c:0c:3d:39:19:d8:c5:a0:7d:c0:
         c3:d5:75:6c:15:73:68:46:9b:ff:45:f3:d3:5f:e9:53:14:4f:
         40:95:3f:71:8c:4d:c5:a8:67:6b:15:fe:58:be:19:11:50:a8:
         d0:e1:45:cf:29:af:c5:3c:6b:10:96:6c:c7:d0:9b:3f:60:08:
         fe:fc:80:65:33:39:6f:b3:31:f9:bd:12:c9:d8:93:e3:28:28:
         83:e0:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----