Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          QqK3y8cRtXm7nMaCughabSc3NEEuKr6gP51kDVGWRKI=
Subject key identifier:   69:BD:F6:80:F4:2F:9B:5B:F2:1B:97:67:B1:06:3D:CA:F9:F5:C9:D2
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       01962F3D56C9C21DE29FA3C1B9025C7C9739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          1430
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: ozl88vf5CfoUNIRz7vsVCirwQgjV47QysorHL2MTNdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:c9:c2:1d:e2:9f:a3:c1:b9:02:5c:7c:97:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=69bdf680f42f9b5bf21b9767b1063dcaf9f5c9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:4f:e2:2c:b9:31:94:0a:9b:b6:13:29:fc:
                    0c:a5:8a:0b:3a:a1:84:68:8d:06:e7:28:7a:3e:76:
                    d3:44:19:0f:ff:8d:ab:1c:71:35:12:29:6a:cb:8e:
                    1a:f6:76:d3:0b:9a:1b:b7:3b:0b:af:78:cb:1b:8d:
                    34:09:75:ac:d8:61:dd:db:b7:fc:cb:d9:80:0a:97:
                    58:e0:89:16:81:08:ae:28:b4:ca:7c:38:e4:5f:ab:
                    5e:1d:31:40:32:a4:9d:77:39:63:24:df:37:7d:05:
                    8c:d6:77:12:53:02:29:30:0d:25:53:52:34:83:73:
                    cf:f8:33:c6:72:c4:ea:25:5b:2b:2b:92:b5:b7:5f:
                    c9:33:0d:44:ca:30:3a:0b:79:3c:fe:fa:fa:4e:db:
                    56:36:0d:9e:48:be:ac:3e:32:fd:b7:e7:8c:9f:a7:
                    d0:99:b3:8a:08:6d:95:50:9c:0c:bd:e1:21:b2:66:
                    82:44:16:1e:01:2b:ad:0e:44:8d:71:fc:b2:02:b0:
                    b1:fc:3b:15:34:65:7c:6e:91:9d:f6:1c:86:7d:e9:
                    e7:60:0e:4f:0e:9e:2d:b2:85:df:c8:63:76:16:ab:
                    19:31:1f:7b:ca:5d:90:43:dc:e1:f0:66:62:e6:a9:
                    b3:db:6d:24:7d:e9:e6:d2:b7:64:d7:e1:c8:98:01:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:F6:80:F4:2F:9B:5B:F2:1B:97:67:B1:06:3D:CA:F9:F5:C9:D2
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:b6:6e:8c:38:c4:78:f3:47:f3:3b:ba:e5:21:53:6a:a0:
         d0:d1:bc:af:6e:5f:b3:c5:5c:02:f5:91:fa:2d:37:7e:3b:03:
         3e:a4:68:3d:48:82:e7:8f:3a:9b:a0:fe:49:96:29:b1:20:cb:
         79:46:90:62:56:20:cb:46:8b:15:59:7e:04:90:5b:eb:0d:79:
         5c:30:38:03:a4:2c:55:88:6b:fd:27:83:0e:52:6a:20:11:ac:
         29:a6:01:21:f2:aa:a5:4f:1d:0e:93:51:4d:ff:de:77:c9:a3:
         b8:db:e6:53:57:b3:e9:de:cc:ab:98:a4:69:36:05:02:f7:6f:
         c7:71:47:0b:05:b8:40:38:14:af:d7:6a:78:dd:fe:d0:a9:56:
         ae:d2:69:d1:6b:90:ba:6e:7f:f1:64:30:dd:a8:74:f1:58:fb:
         82:71:ca:a3:40:c6:3a:9a:c4:88:bc:b9:46:bb:7f:de:d9:b3:
         53:cf:37:e3:ce:08:b6:da:0c:23:71:ae:04:95:df:84:d9:05:
         93:16:c9:dd:5c:4a:e6:84:96:d6:12:0e:49:4c:ee:8d:05:d4:
         9a:99:52:61:4e:9e:fc:0c:88:76:d0:e4:90:cb:d5:41:f1:59:
         52:6c:5c:29:42:4e:dd:cc:3b:9c:00:50:f3:64:fd:d1:ef:61:
         e5:6f:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----