Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File:                     s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier:          aYQZYQQSlDM/+yODNq5SXeSAzXPRA12+60UuGS0md/E=
Subject key identifier:   5A:D5:4E:67:3F:03:36:7D:C7:ED:CD:57:CA:8D:26:F2:FD:3F:21:3B
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer:       /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial:       01962F07291BBE6B9045D1FE7192800231E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number:          0C5D
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
                          2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
                          3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: tSw1ykntAlwToedLMRUn6y0dkIUx2+B1dz3cO5rZ2H4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:1b:be:6b:90:45:d1:fe:71:92:80:02:31:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=5ad54e673f03367dc7edcd57ca8d26f2fd3f213b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:6a:47:df:38:e9:1c:a7:17:cb:d0:78:94:
                    cf:95:ee:50:95:86:2f:0b:ea:06:a5:a1:d5:be:55:
                    58:15:c4:72:b4:f2:48:75:bc:46:57:43:8e:2b:f0:
                    7f:2a:3c:cd:57:2d:17:bd:be:d7:09:b5:98:91:78:
                    c7:86:9c:ac:20:42:65:4a:14:4d:1b:e8:23:4f:61:
                    05:ac:bf:3b:a1:e0:8b:c3:9b:a4:54:30:9d:16:cb:
                    58:8b:6e:3d:b6:2e:65:45:af:f7:b2:31:21:87:54:
                    af:ec:aa:fb:fb:6c:eb:04:b0:7d:ff:10:e5:b5:e6:
                    5e:45:5d:1a:0b:8e:1e:43:63:98:26:c2:02:76:55:
                    a6:7b:42:18:f0:1e:da:f1:fe:63:2c:0a:a0:05:08:
                    4b:21:e0:6b:26:37:ea:e8:c3:ad:bc:d3:f8:5a:30:
                    59:7b:9c:69:42:8f:b7:9f:03:ef:df:bd:cc:5e:e8:
                    c5:17:23:93:85:2d:20:97:54:3d:4e:8c:53:0d:40:
                    e8:25:45:0d:33:b8:64:8d:7c:36:e1:5b:a6:33:b1:
                    28:77:9d:8c:50:33:b4:1e:8c:01:ba:eb:de:3e:67:
                    cb:6d:a3:62:97:ce:d8:99:be:30:ac:e8:d4:78:80:
                    29:15:49:8e:6b:f1:2e:98:1a:94:8b:38:a9:a5:fc:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D5:4E:67:3F:03:36:7D:C7:ED:CD:57:CA:8D:26:F2:FD:3F:21:3B
            X509v3 Authority Key Identifier:
                keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:92:f0:07:b5:22:34:17:d7:ce:10:6a:2a:0e:c6:7c:f8:
         32:c4:73:87:25:73:05:2f:9b:4f:37:2e:94:cd:b0:4a:74:1b:
         ae:2c:51:17:05:0e:1c:de:e2:3c:cb:cb:ae:14:4f:0e:14:06:
         6e:b6:61:c3:cd:ff:51:7d:7d:a0:a5:6e:d5:12:40:d5:f7:8d:
         f5:7d:d1:1f:89:a6:24:a1:d0:52:d2:85:e6:79:f4:21:c1:39:
         fe:74:44:a7:e7:fb:8a:92:16:1d:55:15:f2:b9:3b:a5:f1:a6:
         90:50:d9:71:cc:ed:df:12:85:15:25:f9:88:4a:d6:a6:10:4d:
         f1:62:01:13:13:e0:46:f4:0c:50:3c:4a:de:30:92:b7:e8:18:
         63:76:2b:2e:dc:bb:9e:bf:7c:8f:88:61:57:2e:5f:3c:3e:e8:
         bd:8f:1c:bc:5a:11:1c:68:80:3f:06:0f:3d:81:20:92:60:92:
         a3:1a:9f:26:ca:fb:01:89:b3:7b:ab:ec:c7:98:df:6c:5f:4d:
         c2:1b:53:8d:fc:e2:f2:e2:11:87:46:af:2d:d2:a8:53:ff:c7:
         66:d7:ea:8f:26:b6:0a:89:9e:37:c7:73:02:79:27:46:74:bf:
         a7:45:a7:a7:b6:ce:04:f0:f0:00:a4:0d:45:79:62:d0:11:f0:
         86:af:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----