Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          V8vcubVLAYZ65ECpo0n9nX8y7LayJ05NFteItrP1Ynw=
Subject key identifier:   DF:E1:D5:1A:C7:AA:DF:57:7B:2C:A1:8F:E1:EB:EA:30:67:D4:ED:A9
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       01962FAB3221BCD2E6E1FFDBE9342AFEDC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          38
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: Ga1gguIHtIWajVxQNpjWUjnHZ+nHvpjxryEviXw+lnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:32:21:bc:d2:e6:e1:ff:db:e9:34:2a:fe:dc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=dfe1d51ac7aadf577b2ca18fe1ebea3067d4eda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:03:66:53:71:35:fc:49:0c:8c:09:ca:6d:
                    01:b8:ba:48:07:25:bc:9d:c4:cf:bc:9c:4d:13:0d:
                    31:2e:d9:07:b8:5d:7b:58:58:9b:15:d0:6d:d4:b3:
                    89:29:87:ac:05:2c:b9:f4:d8:f3:71:e0:a8:0b:3a:
                    b5:04:76:e9:62:5f:40:46:7d:ce:59:c8:49:1d:6c:
                    34:95:d2:b8:1a:27:b2:65:1e:21:8e:99:11:86:15:
                    cd:f5:03:a8:20:a1:e4:80:91:b4:06:18:b1:77:2c:
                    c5:12:3e:eb:7a:78:2b:f4:7a:47:d9:bc:25:25:c8:
                    b8:6d:48:2c:55:96:fd:7f:d1:8e:96:af:16:db:bb:
                    b7:58:f7:f7:d0:d2:9e:b5:7c:9d:6c:74:45:79:09:
                    9c:a8:40:b2:3c:81:e3:97:ca:ef:0e:6e:e8:11:b2:
                    bd:01:58:61:e0:b1:21:ad:0c:b6:f7:c0:1b:0f:4e:
                    b1:ed:56:cd:f9:a3:78:db:1d:27:c2:82:44:fb:f5:
                    2e:07:63:bb:f0:24:36:5a:ee:71:3d:93:5a:53:3c:
                    2c:04:90:e7:2f:62:22:06:da:3f:1a:3c:73:69:71:
                    57:3d:17:4d:2e:63:8d:7b:d9:9c:6e:05:e3:bc:c8:
                    b5:1a:5a:a7:f1:6a:72:7e:f4:11:ab:4d:e3:6a:84:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:D5:1A:C7:AA:DF:57:7B:2C:A1:8F:E1:EB:EA:30:67:D4:ED:A9
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:c1:e4:d9:a7:98:1d:a1:b5:c4:89:69:f2:23:85:78:8a:
         07:43:3d:61:68:f1:ea:eb:72:39:4b:e5:c7:8f:54:34:1d:32:
         ff:91:6a:e6:12:5c:3a:e2:be:43:4d:04:b9:8a:4f:72:72:d2:
         0f:a5:4b:c1:7d:2e:7f:7c:59:c9:54:0f:bc:ea:f8:55:b5:5c:
         d1:7b:5e:6a:c5:1b:72:a9:d1:b2:e6:55:6c:9f:c9:d5:16:9d:
         c9:3a:a3:0f:45:83:de:c1:cb:35:d0:c0:eb:3b:1d:14:8f:77:
         3d:06:78:a1:00:b8:e6:bd:bc:32:17:39:da:1a:60:38:76:d5:
         e9:aa:93:47:b4:76:69:c7:a7:14:c6:f7:e2:65:7b:b8:e9:33:
         bc:e6:56:43:38:0f:43:53:72:8f:6a:a7:d1:f6:c1:fc:f7:6f:
         74:f8:eb:fe:3b:d9:35:1a:c7:9b:a4:79:21:ba:ed:19:73:6f:
         c6:a9:3a:6d:c1:a3:11:b6:af:ca:3c:28:51:fd:0e:ec:a6:de:
         57:d6:82:0e:8f:a2:6e:69:0e:3b:72:04:6e:3e:4e:54:bb:1a:
         65:b1:df:90:65:c7:7b:78:c5:4c:eb:f3:47:06:71:9d:f8:a2:
         dc:43:f2:3b:2c:a9:38:a2:3f:5f:7e:b0:3a:59:96:fb:02:29:
         a9:da:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----