Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File:                     CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier:          ZyJCBs/bLdFCZetch/HjyZsYV6yzIMCOcjuGDasrcO8=
Subject key identifier:   9E:F2:34:F8:0B:E8:FD:E6:28:58:F1:CA:23:80:83:AF:54:A4:32:0C
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer:       /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial:       01962E2B43F8925A62FFC4DEF11DAF0EEA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number:          07B7
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
                          2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: EkyQgtgH8ouP/r3cwayvfopT7YDwoVyk1oYlSK6GSGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:f8:92:5a:62:ff:c4:de:f1:1d:af:0e:ea:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=9ef234f80be8fde62858f1ca238083af54a4320c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c8:01:78:55:f2:ef:c5:0b:38:9e:27:18:8a:
                    ff:ed:9f:e2:30:b1:d4:51:97:5e:8e:dd:9a:a5:e6:
                    49:f6:95:a9:2f:0e:b4:a7:71:5d:96:3a:32:2c:89:
                    83:3d:b9:21:69:66:12:10:6f:a2:2d:8a:4a:85:c8:
                    82:da:06:42:74:76:9d:6e:4a:85:53:57:c5:c6:56:
                    c9:cb:c3:b0:5b:be:90:dd:28:34:dc:6b:9e:b3:55:
                    ad:7a:b1:53:aa:fe:57:ea:17:e7:dc:0a:3a:6e:06:
                    f0:37:af:fd:70:e9:ce:bf:d3:d6:0d:c6:54:92:b3:
                    b9:70:40:f2:71:1e:86:4b:37:71:14:48:c6:ef:37:
                    43:31:fb:ea:09:f9:72:91:31:95:65:e5:ff:2b:e6:
                    16:e3:8b:1a:52:29:02:15:80:2c:64:21:c1:f4:a9:
                    16:97:8c:03:d4:18:7c:7d:fa:48:09:b3:42:bd:11:
                    b8:b0:97:01:fd:9a:f9:48:9d:b6:96:d0:a0:51:d4:
                    02:0f:cd:90:0d:91:5a:1d:fd:38:56:9e:05:cc:e3:
                    8e:4e:8f:ea:61:ef:c1:3d:a8:86:3a:f5:50:59:62:
                    14:2b:cd:bc:17:99:27:db:22:2b:2f:9f:56:dc:72:
                    6f:5b:bc:ef:02:d2:2a:fe:15:06:f1:7d:44:90:7a:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F2:34:F8:0B:E8:FD:E6:28:58:F1:CA:23:80:83:AF:54:A4:32:0C
            X509v3 Authority Key Identifier:
                keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:75:df:0b:f1:fa:90:0c:b7:72:ca:2b:ea:e6:0d:7f:a9:1b:
         3a:1d:8d:7d:98:98:49:50:83:94:79:5a:14:d8:86:4d:00:25:
         3f:5f:6a:6b:c1:42:3c:3a:f8:15:be:27:29:6e:0a:b2:9c:a3:
         31:97:a8:0f:f1:e9:03:32:ac:e2:b3:a4:95:9a:2c:5e:7d:02:
         27:f7:73:1c:67:ad:48:96:8a:08:6a:c0:78:08:b8:be:9a:1e:
         e5:99:e8:11:51:c7:f1:c0:f0:df:78:53:36:15:38:49:93:3d:
         e9:82:a1:46:7f:02:97:21:33:03:fd:9c:28:18:6d:6b:c4:9f:
         f6:e0:d9:63:6e:94:0f:d8:42:ed:30:52:da:1b:d1:c9:06:db:
         c9:b9:84:c3:6a:23:a9:db:e2:1b:0c:cc:65:80:c7:4a:5b:f5:
         3c:c1:5d:00:a6:a3:4e:7d:3c:55:c3:6d:83:81:d3:55:fe:fd:
         70:dc:9c:17:8d:10:1d:62:69:03:24:33:f4:d3:a1:c8:a8:27:
         a2:65:a7:8c:90:96:02:2a:80:93:1a:c0:e5:ba:26:8f:86:ac:
         bb:59:cf:19:12:12:12:ba:26:09:ef:ea:c2:03:12:17:29:f2:
         9a:a0:5f:8e:3b:2b:d6:7b:ff:48:87:e8:5c:df:21:de:25:82:
         eb:6c:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----