Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          f2liELZ+/7HRZd/lCeHrAA9IDOcUHs7U8CEaD1eAD88=
Subject key identifier:   35:EC:0F:93:B9:43:81:78:02:C7:2D:B5:96:66:4A:F6:21:98:5C:22
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       01962F3D3620D420A6251943F861F69FA3FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 5q_QBExX-iJkMtzTZ_fdW28i38Y.roa (hash: o+vnb00qVUwzoLHaYfEzcLDShc1yhr65w9Ny1ipEj7o=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: Jdgy1E10B1CaoZX2kAYttErGGyqIRmCS5DGfMfOi/oQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:36:20:d4:20:a6:25:19:43:f8:61:f6:9f:a3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=35ec0f93b943817802c72db596664af621985c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:63:4d:6c:8a:c9:c3:a9:9b:eb:7d:fb:68:
                    40:20:78:22:89:2e:67:8f:db:b0:62:fa:e3:c0:d7:
                    b9:f5:5e:79:7e:67:2d:f2:94:11:78:90:55:d6:9f:
                    23:64:16:75:bd:ba:60:aa:1c:1e:e6:f6:89:bb:55:
                    32:95:e9:82:b8:44:4c:99:e4:2a:bf:6d:6d:b7:66:
                    09:03:ab:53:0a:4a:17:27:65:d6:6f:f8:8c:d2:14:
                    26:ab:81:28:50:91:3f:a8:17:0c:c4:fb:8f:8e:70:
                    15:c7:7e:00:92:86:2c:16:11:f2:1c:9f:8b:cd:f7:
                    31:62:a0:1d:bd:26:e6:0d:bd:14:04:24:76:15:a4:
                    58:10:7d:02:86:f6:bc:c5:3a:67:1a:c9:e0:e6:d9:
                    47:49:a2:b3:36:93:84:55:b2:83:78:fc:b9:f5:c8:
                    7b:ca:07:8b:31:01:b1:94:93:81:2b:af:c0:23:28:
                    44:01:83:f9:6a:4b:4c:59:dd:46:4b:0a:f5:29:da:
                    2f:72:f7:80:ed:b2:6f:7f:2b:ad:fe:95:ab:d2:2a:
                    bb:1f:34:a6:6b:c7:fe:b2:4a:d7:20:40:86:dc:e6:
                    3d:1d:5f:35:c3:69:11:47:bf:09:95:ec:4d:c0:ae:
                    c2:c5:8c:c5:5b:9b:77:2a:52:03:6e:07:ef:df:e7:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EC:0F:93:B9:43:81:78:02:C7:2D:B5:96:66:4A:F6:21:98:5C:22
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:37:18:d4:e9:3e:ad:d7:fb:fb:0a:f9:03:f3:fa:30:a1:a6:
         91:fc:26:88:54:ba:a2:52:80:c9:f2:17:c3:1c:70:8b:ce:72:
         ae:cd:d4:6a:6c:dc:39:4e:64:c4:61:d0:8f:c0:6b:fb:a4:62:
         1d:fc:8b:5a:66:31:c1:ad:5c:9a:5b:99:db:a2:a8:da:26:62:
         0b:6f:6d:84:c4:6e:64:d5:c2:e0:af:e7:71:55:94:4e:8d:a9:
         f9:9a:9b:f0:23:3d:65:2f:bc:a2:93:a5:f1:bd:b5:25:ac:21:
         d5:dc:d4:0e:cf:7e:4d:f8:41:f8:d2:0b:d9:71:6e:9f:f9:60:
         c9:6d:17:51:e3:32:98:d7:83:93:9d:96:9a:ef:e0:ee:ab:60:
         9d:20:a7:e5:9c:e7:6b:6e:dc:42:7b:8e:49:8c:a5:8d:d6:ba:
         7a:e0:62:cb:1a:93:35:26:7f:5a:ee:22:46:2e:93:92:0e:0d:
         06:4b:64:e1:b2:bf:eb:ac:11:95:00:16:6e:31:b5:3d:68:44:
         e3:4e:da:54:cc:03:34:27:5e:0d:35:73:a6:7f:b4:6d:7c:08:
         3c:05:1e:77:13:86:cc:1f:7d:00:1c:b4:22:6a:dd:d3:70:95:
         9e:12:a8:55:4e:48:47:b7:10:0d:b8:2f:3b:94:6a:21:d1:1b:
         dd:89:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----