Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File:                     rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier:          j0J+sb/RglC+KUnRxBw0waOiqKNoCHTcR7mOiMyQWbw=
Subject key identifier:   0B:8E:FA:22:D8:4A:BA:A4:EF:CD:D1:79:97:0C:60:EE:D7:D1:6D:F3
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer:       /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial:       01962F0695415714C73C9317418576BEF6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number:          0B93
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (hash: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=)
                          2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: u+ZMS63aPrqltwU55dmZcGqpYw5JLZtuYNfF9tX5ar8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:41:57:14:c7:3c:93:17:41:85:76:be:f6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=0b8efa22d84abaa4efcdd179970c60eed7d16df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:ac:4c:90:20:af:77:94:d7:97:b2:6a:d8:
                    10:b4:c6:70:5d:b0:b3:d6:a2:fc:d1:4c:b2:f2:1e:
                    94:cd:36:09:9c:41:95:81:2c:6b:be:cc:0f:3c:e7:
                    8e:02:25:65:2b:4e:61:1f:3f:65:38:fe:88:a8:09:
                    14:3a:3d:51:f3:ec:3f:88:8f:ff:cd:31:9e:a0:1a:
                    84:ec:91:55:b5:bc:1b:d0:89:28:b5:22:34:a2:a1:
                    5b:5d:5d:cb:6f:15:c8:2a:7c:3c:f0:92:1c:73:3c:
                    81:de:4c:51:51:d1:d3:4c:81:07:d9:77:da:fb:b6:
                    cc:1c:c3:6a:8c:b5:51:7e:cd:50:6c:55:70:ca:ee:
                    a7:69:06:4c:3b:c5:89:e4:75:05:f0:39:55:83:0a:
                    d2:08:3e:59:54:5e:11:ab:59:71:b8:7d:c5:e2:e5:
                    71:63:6b:71:f6:d0:df:a5:08:7b:5f:e2:1a:21:ab:
                    0f:40:77:ba:df:4c:08:84:ba:1f:c2:c0:ba:01:38:
                    c0:66:ac:92:7c:38:a1:02:c6:1f:b6:72:89:15:f7:
                    cf:38:dd:15:c6:38:aa:75:cb:4a:09:1f:11:d8:b8:
                    7a:ce:c6:2a:33:01:ba:d3:9c:2e:ea:6c:c5:7e:de:
                    27:aa:ec:68:f2:1e:c5:54:57:10:7b:4e:bd:9a:56:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:FA:22:D8:4A:BA:A4:EF:CD:D1:79:97:0C:60:EE:D7:D1:6D:F3
            X509v3 Authority Key Identifier:
                keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:8a:6b:de:6a:5b:3a:16:7a:09:e2:b0:1c:f5:76:59:68:
         2b:b8:93:da:89:c1:43:37:6f:0b:0d:3c:2e:4b:50:ea:62:41:
         51:76:e3:29:59:32:d6:29:99:25:30:6d:4b:9b:30:63:a7:89:
         59:9c:15:75:2e:bb:b3:45:3c:ab:ac:38:c8:b8:43:3f:15:30:
         1f:c8:d5:55:8e:3c:6f:54:18:a4:4e:27:a6:33:0b:80:5d:95:
         c1:8a:00:e4:03:ac:f3:e1:55:9c:4f:54:26:3e:a1:2d:4d:4b:
         64:3e:27:53:1b:e5:d7:e8:6e:d0:de:c4:85:d5:a4:b5:4d:96:
         b1:e1:7f:cc:e3:99:c8:6a:b1:8b:e0:32:db:a7:6a:21:11:6a:
         08:b3:41:c2:94:96:d8:0e:6b:09:e6:8f:67:4a:36:60:94:f6:
         57:b1:00:51:56:e1:00:9a:a6:e4:7c:a7:48:ad:7c:b3:38:de:
         5e:13:c6:71:4d:ce:1f:fe:a0:f3:fc:72:df:7b:fc:cd:4a:f3:
         de:bc:ca:86:ad:99:6a:f9:58:15:5c:5d:2d:d3:d1:ec:04:fc:
         f2:b2:30:87:19:55:4a:a2:aa:26:46:cc:8d:fd:41:6e:d3:ab:
         3c:52:06:fb:1f:92:11:cb:04:a8:c8:d6:a5:15:a3:8f:f6:69:
         61:a8:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----