Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File:                     S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier:          vehcwresNIEfpuB02WtuTH2KvPPiB+hsujeQrvHBfos=
Subject key identifier:   BE:50:44:5F:DC:90:4A:91:43:AB:A3:C9:A9:4A:97:75:E8:45:9A:0E
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer:       /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial:       01962E2B2353C7B9A8EE9E4A3A80F955BFD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number:          1184
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
                          2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: BGzAPpcVVwzyUFjS7Ait2kLTaGzR6SwPncqjm0Vz9lE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:23:53:c7:b9:a8:ee:9e:4a:3a:80:f9:55:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=be50445fdc904a9143aba3c9a94a9775e8459a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:4a:98:43:d6:07:be:c5:30:44:49:3d:7e:
                    29:f7:f7:93:25:da:dc:5d:76:49:09:23:13:5f:dd:
                    2c:4a:22:bd:63:7b:0f:99:c2:b0:eb:f2:7e:42:cf:
                    62:31:be:ef:65:dc:68:59:14:6c:71:2b:d9:59:08:
                    7c:0c:04:c3:c1:e0:88:a7:8e:04:0a:84:66:ec:0a:
                    ec:06:14:66:09:cb:92:4c:34:2c:f6:e5:ea:91:2f:
                    65:8b:25:52:52:c6:9b:a4:20:5e:e2:4d:bb:7e:5d:
                    ff:62:93:18:4d:8f:01:6d:1a:0e:c8:d3:49:2a:9a:
                    6e:f8:96:bf:2e:ca:2a:b9:b8:e5:8c:24:67:cf:f4:
                    27:00:f2:ed:71:92:b9:57:40:41:1f:28:47:93:71:
                    a2:35:ab:f0:ff:17:85:ba:61:9e:8e:bf:3b:ef:0e:
                    6f:29:bc:f1:ba:3f:92:aa:c5:5b:15:7a:6b:dd:ff:
                    cf:a9:c4:65:8c:65:fc:e8:18:d8:f5:5a:be:31:92:
                    1f:82:db:28:20:63:f7:57:06:eb:32:d8:bb:b3:d4:
                    00:ca:08:50:64:c6:ce:c6:0c:48:64:86:c2:d2:d1:
                    b0:58:38:af:d9:54:4e:81:f0:bd:bc:dd:2c:65:24:
                    e3:ca:f2:cc:0d:31:18:1b:2a:7e:50:6e:07:f4:c9:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:50:44:5F:DC:90:4A:91:43:AB:A3:C9:A9:4A:97:75:E8:45:9A:0E
            X509v3 Authority Key Identifier:
                keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:c9:55:82:20:6c:a3:59:82:70:fb:1b:c4:66:f6:1d:f4:
         c7:db:7c:2f:72:72:2f:82:86:5a:89:cc:d4:c3:c7:32:7e:d7:
         89:6e:b8:a4:14:aa:ab:ec:6e:c0:35:aa:55:83:9e:ce:41:a2:
         f0:6e:bd:85:95:34:6a:37:de:9c:75:4d:fb:13:ef:da:e7:51:
         61:89:72:1a:0f:a4:63:17:b8:bc:ef:db:ca:a6:8f:69:74:dd:
         9d:5c:d0:06:31:2d:14:f8:fd:43:23:89:57:82:8b:00:0f:43:
         f5:9e:f9:ba:a6:58:75:cc:95:fc:ce:86:5f:23:bd:88:66:59:
         77:13:2c:4b:57:08:aa:41:49:06:16:a4:51:80:dd:da:48:cb:
         b5:16:56:e2:43:b3:f3:a3:c1:ba:41:f0:6a:70:51:4f:05:03:
         df:39:14:35:12:39:d9:f7:e6:f7:63:e1:ea:69:f4:f6:04:e3:
         d5:9a:ed:2c:19:fc:28:36:40:d0:03:b9:57:95:76:41:97:3b:
         ec:82:4e:fe:b4:35:e2:59:40:8d:41:92:ed:e1:cd:10:97:32:
         aa:3c:e5:c0:9a:52:67:cd:77:f7:fa:f6:c4:8a:7c:8e:3c:dc:
         34:85:1a:9d:a2:d8:af:f6:0c:32:f2:dc:5d:c2:e8:57:bf:c3:
         f3:b5:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----