Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
File:                     sCqpYbR31UI9hbfUPz76JjJtcJA.mft (raw, json)
Hash identifier:          9PvOPS3hsnudzrml4RSTyCGYrhKJGnbF5b+44lIGfV8=
Subject key identifier:   18:1D:14:F4:06:BC:EB:C6:57:31:2E:8C:F9:23:1C:32:90:40:83:1B
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Certificate issuer:       /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial:       01962F3D46AB7E03B81CDCB16E04ECB47CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 3WE6dfLNxFsfmDokXfTCR3HDgJA.roa (hash: 4x45ICmKpG8qOpEIix9N+xHqWEezDEIU9A+oBlF8GPM=)
                          2: Wb3lkfWf6ka0qstTNr3DHQk98Io.roa (hash: GA6ShDwKxVTanoCjEQltZxPOXFGDZucgrHs4qUUB0mE=)
                          3: gftrqq2xNPQCOHxaCTBevS63_R0.roa (hash: BBnqHSnGOHFEg3w/aAg1dxePTY9R+tg1C4jtSLBPpAc=)
                          4: m3cUBYWpFoNJDd2-oxdIXkG8VVc.roa (hash: mpHup3F6Ugyx18V1b4d2pdWmlp5tb6/q3Al4PmenfT8=)
                          5: s0olpFJOyt15T_pyM--2CmUb0gk.roa (hash: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=)
                          6: sCqpYbR31UI9hbfUPz76JjJtcJA.crl (hash: g26+GkzklmWXq+JPQZOWg6H1iZjv51UAMzFQUplw0KY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:ab:7e:03:b8:1c:dc:b1:6e:04:ec:b4:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=181d14f406bcebc657312e8cf9231c329040831b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:26:05:15:da:5b:12:74:8e:27:8c:a5:b1:
                    61:02:a2:d5:02:96:dd:fd:b8:3f:8c:df:d7:bd:af:
                    d8:1b:d9:8b:d7:e9:14:b0:21:e9:66:ed:75:14:43:
                    ab:43:2c:b9:81:2b:57:06:f3:44:62:92:00:c0:7c:
                    da:0d:ae:b9:cb:68:88:70:48:02:79:8a:9d:59:53:
                    29:87:44:32:12:bb:34:bd:c5:d3:f1:a7:c2:d4:43:
                    40:a8:28:19:51:03:41:b0:4b:0b:1b:f0:0b:f1:50:
                    cc:25:3b:fd:5e:30:18:3b:f3:09:3b:31:a9:8d:fa:
                    05:9b:bb:69:16:61:01:3a:64:90:6e:15:8d:36:6c:
                    70:a2:0d:a6:d4:cc:01:93:5c:e2:1b:e6:7f:5d:2b:
                    17:3e:77:b2:9f:f3:91:2d:52:5d:a8:ca:45:f8:bc:
                    25:4e:bb:e7:df:41:bd:3e:da:53:c3:6f:8c:63:49:
                    16:07:d4:97:a0:f1:51:ef:03:d3:6d:1c:2d:ee:92:
                    d4:0a:9c:d1:c1:9d:ca:80:bb:14:a6:f1:33:93:e8:
                    46:09:e8:d8:83:41:ec:fb:87:44:df:d5:e9:1a:45:
                    0d:c8:88:e6:b3:2d:c4:dc:12:43:d3:b3:5c:4c:f2:
                    e2:91:57:14:1b:99:a5:35:b5:80:79:ea:e1:df:f2:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:14:F4:06:BC:EB:C6:57:31:2E:8C:F9:23:1C:32:90:40:83:1B
            X509v3 Authority Key Identifier:
                keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d9:0d:3d:d8:7c:1e:8f:ab:25:0e:e3:3a:04:94:6b:a8:e0:
         0c:0b:6b:2b:32:7c:42:8f:2b:81:f8:cc:6c:52:97:17:e9:99:
         5c:87:c0:44:b2:08:64:f5:17:01:6a:f5:77:a9:08:a3:e6:87:
         77:46:e5:6a:c5:da:62:c9:ad:19:3d:a1:92:5f:1c:9f:0a:eb:
         c5:d9:ca:09:e3:5d:52:7c:15:2b:42:c5:2b:50:3e:cf:c3:ec:
         76:44:8b:85:f7:f2:a2:82:b3:bf:b7:73:f6:f2:0b:2e:b1:33:
         51:93:82:a5:7a:c6:1d:36:49:61:06:d9:8f:5b:83:8f:69:6e:
         e6:5f:1c:31:78:5d:7c:f9:d0:71:f4:13:f1:3b:e4:7c:9f:eb:
         b8:a1:a0:a2:06:12:50:44:da:e6:6e:08:34:59:de:21:5e:ad:
         3c:df:6e:da:64:35:1c:62:20:cb:e4:20:79:40:4c:bd:40:dd:
         08:61:34:2a:37:e7:2a:14:d0:f0:77:46:bd:17:ed:3f:3d:e0:
         4b:b1:43:34:be:d3:6c:e8:ff:9d:6e:1c:fe:a2:8b:cf:6e:e4:
         62:24:25:7c:e9:66:d2:74:d3:db:e0:4f:4a:96:82:43:da:0a:
         49:7c:31:f6:fb:5e:ee:13:a2:93:a9:36:fb:6f:c8:73:8e:97:
         f5:6c:8e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----