Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          OTHz5Vj12EORvli0K14/vFMgqZyFIMmFAhbsDgzRI7U=
Subject key identifier:   DC:E3:16:BE:DA:23:BD:87:63:BC:97:CF:B8:0E:18:57:4B:0F:E5:A7
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       01962FAB3F4A3160E8167C0387FF23790CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
                          2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
                          3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: sICiR7u3iQjV3Q77NjPJCMTnIy2M9U16QeJX+ZDbXNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3f:4a:31:60:e8:16:7c:03:87:ff:23:79:0c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=dce316beda23bd8763bc97cfb80e18574b0fe5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:d0:85:44:c7:b8:4d:b0:e4:96:dd:be:2e:
                    1d:cf:ab:57:2b:fd:6b:3a:57:e2:2a:2e:00:18:ff:
                    79:c9:26:fa:02:c6:81:cd:79:ba:ca:30:15:f2:bf:
                    61:d1:67:9c:44:27:fa:7e:7f:ba:8f:4f:40:72:90:
                    9b:88:eb:74:f3:c8:a5:f5:e8:be:be:ae:d4:7f:f5:
                    cf:33:38:60:97:2e:a7:2c:81:a8:00:6d:74:6a:1d:
                    fe:0b:41:33:e1:a6:10:09:71:45:88:c4:29:6a:e1:
                    8b:ee:5c:4b:d2:13:5b:a9:17:ba:2a:0f:15:64:cf:
                    69:31:2f:db:13:e0:c0:eb:72:00:20:71:e1:ad:f8:
                    6f:0f:67:de:5d:b2:3e:a8:bb:fb:70:fa:16:65:9b:
                    58:de:9b:03:c2:ce:ae:ff:65:d3:c3:69:fe:ec:f0:
                    8a:05:ab:f6:58:c5:24:75:a5:8b:70:82:6e:07:39:
                    88:05:41:29:9d:91:7c:ae:2a:3a:83:2c:7e:3a:6c:
                    a3:f0:5d:2e:3c:59:28:a5:44:ad:32:d9:4d:06:26:
                    9f:65:2d:01:c4:33:94:8e:3a:4d:7e:19:0d:b4:f6:
                    56:59:39:70:b5:0d:fb:8c:c0:1d:aa:7e:64:99:52:
                    8b:a5:60:80:9c:95:9f:d3:90:81:e8:52:c4:23:5f:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:16:BE:DA:23:BD:87:63:BC:97:CF:B8:0E:18:57:4B:0F:E5:A7
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:95:fd:15:53:55:22:c0:53:a2:54:10:e4:d1:d6:70:b8:dc:
         6f:c7:bc:45:18:8e:b3:36:c5:1f:06:3d:11:cc:62:98:8b:f6:
         eb:78:4f:24:d9:28:5a:e3:51:30:db:6f:0d:f6:e0:60:54:96:
         7a:d2:2d:f6:79:f2:a1:ca:04:68:94:14:f7:08:df:96:ae:ae:
         84:e4:41:ba:ea:2a:da:52:62:7d:5a:46:f2:81:4c:85:4f:ce:
         91:60:5c:36:6c:94:7b:e5:7f:3e:9f:e1:36:a8:db:2f:b2:2f:
         b0:f1:0b:c5:94:86:52:92:e7:c2:6e:ff:46:91:3b:7b:7d:f9:
         9d:f4:47:05:35:f8:df:37:1a:40:e0:0c:a2:49:e2:61:ba:45:
         22:1d:c6:f2:b9:68:f4:05:f8:e5:cc:d2:97:4f:35:6f:28:82:
         49:85:66:e3:b8:8c:83:32:a8:2c:a5:51:59:da:b4:97:40:e1:
         9e:5d:0f:b6:22:74:62:fe:ff:33:84:32:3c:30:3b:5e:2a:79:
         6b:53:f4:16:e8:e1:60:1a:ab:e2:ef:90:32:40:a8:56:76:5d:
         45:71:57:9f:ce:8c:a0:ec:1c:47:7d:c6:3f:ad:cb:40:2e:69:
         a0:b1:2c:d9:17:0c:4a:f0:4b:9b:14:1d:e3:e4:d8:9e:61:7d:
         17:17:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----