Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File:                     SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier:          d1V+IFW5iw1XTy3fCQgAyjVu3uEFJ+ez5yrUwL2GGH8=
Subject key identifier:   DB:01:07:93:72:96:26:E8:3C:8D:E5:F8:AB:14:0E:F6:BE:97:D0:36
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer:       /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial:       01962F74E53D6BABB437A67A82C821AC90E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number:          0EF4
Signing time:             Sun 13 Apr 2025 14:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:52 +0000
Files and hashes:         1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: Ub66MXVK9w3ncNH5EoMmC/5OpTI/tPdfGIg5v+xnTmo=)
                          2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e5:3d:6b:ab:b4:37:a6:7a:82:c8:21:ac:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
        Validity
            Not Before: Apr 13 14:01:52 2025 GMT
            Not After : Apr 14 14:01:52 2025 GMT
        Subject: CN=db010793729626e83c8de5f8ab140ef6be97d036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:f1:78:98:96:05:f0:ea:79:aa:85:f3:82:
                    95:fa:ee:0d:61:e0:5d:d9:49:1d:5a:1f:7b:d5:80:
                    32:f1:23:61:7f:34:6b:e3:23:51:e3:8d:50:2f:f1:
                    c8:58:27:39:7e:53:75:9a:05:e9:0e:73:62:cc:e0:
                    ae:37:3d:69:cb:e6:2c:84:43:ee:f4:70:ee:29:2a:
                    48:4a:b3:7a:5a:f7:c6:fd:88:da:3e:e6:82:33:d2:
                    bc:2f:6b:ff:28:ec:93:18:80:83:51:5e:aa:c1:a0:
                    93:64:be:65:37:6e:08:36:c1:88:02:b4:58:d5:f8:
                    29:f2:c9:54:b8:2a:19:b2:28:62:5a:c7:b8:01:bc:
                    22:3a:40:15:d1:4b:c2:5e:78:fe:ef:19:2c:2d:a7:
                    ff:34:2d:79:82:c4:de:aa:3c:97:b3:ab:d2:f8:ca:
                    54:c3:db:13:da:7e:0b:c4:8b:6f:e4:f1:22:58:4d:
                    af:71:d1:8b:35:1f:cb:48:8d:a8:16:a3:89:64:17:
                    d0:18:a1:29:91:01:e0:62:80:ed:07:6b:59:e7:d4:
                    c2:ca:70:9a:34:26:1f:9e:4a:ac:3f:95:35:39:75:
                    77:26:f3:79:45:1d:0e:4e:a4:02:5a:6d:ee:68:22:
                    45:42:a9:e4:6c:15:14:dd:4a:bc:26:97:af:cd:65:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:07:93:72:96:26:E8:3C:8D:E5:F8:AB:14:0E:F6:BE:97:D0:36
            X509v3 Authority Key Identifier:
                keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:85:f7:77:e1:7a:a1:17:a0:97:51:ea:e6:c5:e5:5b:50:2a:
         d6:4b:d8:5f:a6:41:94:3c:60:22:4f:f3:db:e3:7c:c3:37:7a:
         f6:70:88:7c:99:6c:97:c5:1c:ac:a6:3b:fc:dd:a9:e4:97:a4:
         54:9c:40:a2:29:fd:82:bc:1e:79:de:ad:b8:fd:2c:ae:20:f7:
         06:68:d5:d3:ae:10:66:b5:5a:31:28:30:58:60:ff:d0:03:b9:
         9a:25:56:41:2e:6f:e1:94:f4:fe:3e:76:d5:ca:95:d6:77:1c:
         5e:c0:10:a0:d0:ec:e1:8d:f5:70:4d:5e:ed:dc:64:49:96:8e:
         85:33:50:f0:a0:40:63:85:cb:b8:fc:30:19:af:c8:72:ee:11:
         b6:9c:0f:28:a3:02:60:47:dc:1f:69:42:48:83:b3:68:25:69:
         d7:fd:e5:02:b9:0f:ba:f2:bc:75:ea:8d:30:cf:c9:90:0f:83:
         b4:6d:2e:23:ba:0d:f6:09:23:69:10:11:54:d3:fb:ae:b1:08:
         c4:85:89:f4:8c:f2:ce:60:a2:44:2f:5d:f0:3b:8b:39:16:b8:
         08:65:33:9b:10:dc:54:0c:5a:bd:57:51:3a:91:b0:9e:b2:6a:
         68:a1:67:bf:a1:01:cf:35:8a:27:e5:09:c5:db:d4:43:c3:c3:
         cb:b0:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----