Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          /34/WhNaXysg5eBPRyfL7wBRb7OreynirVEodiJJhIU=
Subject key identifier:   EF:AD:AB:3D:6E:B2:B2:F3:63:F8:CA:EC:6F:3E:BE:FA:72:0E:F4:E3
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       01962E61C9095056EFEC1C9C87C87F97B9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          1094
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: HGyMO-gI6BJOthGGldBVkMwTP6M.roa (hash: LWkHdvqqdhuJkMVn2Z8NyBNjrEPjz4vXV3NQv+TmBQY=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: fOAmyBfsLqusM/eFeNb/IT13p93aqoggeEPahlw8DAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:09:50:56:ef:ec:1c:9c:87:c8:7f:97:b9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=efadab3d6eb2b2f363f8caec6f3ebefa720ef4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:72:4d:b0:ca:f4:60:fb:dd:40:b5:94:d0:
                    68:a2:f3:09:39:84:59:6b:8a:f7:26:39:e4:fc:64:
                    d6:81:93:3f:79:b0:6e:f1:3c:87:7a:de:cf:f9:30:
                    5f:80:df:e0:3d:7d:3f:e8:3c:27:1a:a7:43:fa:9b:
                    dd:47:5f:9a:83:d1:18:15:49:ba:4e:4c:89:48:f1:
                    1a:5c:54:de:85:27:55:82:70:4f:be:89:90:35:9e:
                    ef:a5:25:d5:84:86:5a:e5:e5:50:6a:69:ed:9f:16:
                    39:c3:7e:1f:e5:ab:7b:a7:46:a9:e0:94:6e:4d:ce:
                    26:7d:7a:34:2c:00:23:a3:ea:29:ff:6a:8e:79:b1:
                    13:b7:04:63:d8:fd:17:36:b1:a3:50:a3:0c:3f:b6:
                    60:0c:32:08:ac:dc:99:2d:fa:11:cb:79:da:0c:ff:
                    cc:5e:be:33:a0:a5:93:19:af:3e:55:3d:23:38:3f:
                    d5:77:28:99:bb:1f:22:f3:ed:5c:ec:31:5a:c9:ea:
                    9d:5f:1d:e9:79:92:f7:9d:94:82:9a:92:12:cc:fc:
                    8d:77:96:b4:08:06:76:6d:ee:b4:ba:e3:77:83:75:
                    19:73:a5:47:4e:e0:82:68:7c:9a:70:a7:b4:1e:8b:
                    90:2c:f1:aa:fa:ef:1f:9c:51:bf:1c:e5:15:87:fc:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:AB:3D:6E:B2:B2:F3:63:F8:CA:EC:6F:3E:BE:FA:72:0E:F4:E3
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:4d:96:68:b4:97:6d:a9:14:6d:13:21:41:7c:cc:72:cc:
         db:46:ed:73:02:b6:86:35:e7:1b:c1:1b:98:40:8e:2d:94:f2:
         54:c6:50:62:d0:3f:03:01:fe:42:eb:0a:b9:95:ae:b0:3b:a5:
         82:ec:63:1d:9d:d5:0b:9a:68:01:18:5a:0a:ec:be:15:65:25:
         e3:3b:af:13:11:5d:ed:78:93:dd:6f:56:07:98:6d:ac:7c:18:
         bd:66:30:aa:90:56:1a:64:ad:56:2c:dc:37:1c:b4:c9:7b:26:
         a3:3b:81:5e:81:2f:c1:b0:b2:61:c6:54:f2:10:8e:ff:4f:83:
         29:bc:a0:7a:73:77:a8:4d:a5:60:ad:19:a9:1a:4f:39:5b:8b:
         bf:ec:d5:4b:5e:64:45:9c:f6:05:d0:e1:c3:a5:58:18:38:13:
         8f:8b:47:36:62:83:f6:b4:cb:32:aa:c8:d0:00:c6:8c:75:54:
         c5:74:b6:75:12:d9:c2:03:22:00:0f:65:a1:fe:22:a0:d6:7c:
         28:5f:e6:30:d8:cb:5f:e7:20:5e:ce:14:1b:63:48:44:5a:13:
         9a:1e:b4:9d:5f:e7:b7:f6:42:c9:7d:36:d6:6c:40:89:75:3e:
         9e:89:92:88:2f:9e:69:75:98:78:86:c6:2c:3a:37:36:5b:07:
         c3:97:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----