Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          a2GRQ7R33N4zGjoraTdDMqQE4GT58NRWyno9S5sJ82Q=
Subject key identifier:   EB:57:B0:65:B3:1C:36:F9:AC:82:C9:F5:9A:6C:C1:60:D6:D1:82:D8
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       01962DF3C72695EF780909264061124CE54F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0B72
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: QGk/mBw1fLuGgqbsHhmbuIALiA0A5YSUJq8D9xYeaXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c7:26:95:ef:78:09:09:26:40:61:12:4c:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=eb57b065b31c36f9ac82c9f59a6cc160d6d182d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:8e:cb:8b:03:89:6a:25:60:b8:63:c3:10:
                    08:69:7c:42:8e:f2:2b:cc:e4:91:19:2f:f2:aa:9b:
                    b2:f0:f9:10:b9:7c:be:78:27:7a:94:bf:12:b6:3a:
                    f6:ec:04:f3:9e:a2:6c:0c:55:66:af:f4:a6:29:50:
                    55:07:be:6a:47:1b:b1:f0:56:b2:2f:e8:a2:65:dc:
                    2d:66:a4:86:db:03:28:35:50:5b:f1:90:2c:dd:93:
                    2b:d6:cc:0a:46:23:f5:9a:b8:3f:55:5f:96:65:31:
                    08:33:8a:38:2b:9c:9e:4a:a9:38:e8:da:be:8f:b0:
                    b0:b7:3a:f2:f7:30:f9:a8:b5:79:a4:65:d6:cd:b1:
                    82:7c:71:3a:da:3a:38:c1:98:80:de:5e:87:49:e9:
                    05:d9:47:67:52:57:1d:cd:60:aa:0a:42:1f:cc:24:
                    1b:f3:9c:aa:7a:af:76:b0:fe:b9:b2:ec:a7:32:80:
                    6a:33:ab:8d:3d:39:8a:dc:6d:58:15:24:24:a8:5c:
                    a9:41:38:9e:9a:ed:70:52:d0:d6:75:52:0f:fb:f1:
                    75:69:c9:cd:f4:02:51:56:53:0b:92:00:43:65:10:
                    bb:5d:49:20:b3:c1:93:14:6e:56:07:2a:67:30:7c:
                    b5:d5:aa:84:39:0a:5e:e2:a6:b2:ec:5c:2f:30:0b:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:B0:65:B3:1C:36:F9:AC:82:C9:F5:9A:6C:C1:60:D6:D1:82:D8
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:e6:72:62:7d:bd:92:eb:d3:2b:5f:12:29:54:5a:8d:45:
         5e:c3:e2:eb:1f:de:d7:9c:3d:f3:09:5a:29:02:59:d1:b0:c2:
         99:d7:00:0e:b7:1c:06:ec:3d:26:f4:ff:ab:a7:28:14:0e:06:
         e9:9c:56:ab:31:b4:70:e9:08:ee:58:0b:61:02:83:36:c3:36:
         1b:38:84:5b:7c:b0:bf:96:87:9c:7c:5d:ef:e9:fb:21:fa:eb:
         96:bb:c8:09:13:53:ee:64:b1:9b:a3:b8:99:0c:70:e8:63:fa:
         1e:d8:2b:e9:03:54:41:07:b0:16:40:3d:7d:5c:96:a7:5e:d8:
         d6:d2:c6:3b:e8:f8:78:82:05:2d:ac:c4:da:e7:94:b3:4b:24:
         a8:c4:12:f1:61:75:9c:f2:d1:f7:5f:07:d5:46:08:2c:d8:24:
         04:d4:40:8b:b1:8f:77:35:ab:c5:55:3a:66:27:35:29:71:82:
         15:2e:92:c1:36:70:e0:11:26:6f:52:dd:06:e4:94:0f:55:d7:
         60:78:08:f5:96:64:09:ea:05:bf:c1:19:51:38:03:25:86:d9:
         98:23:26:cd:e1:03:73:21:6b:fe:0f:a0:6e:e0:39:43:a1:1a:
         46:bc:00:b1:82:8d:5c:46:3f:a1:cd:8c:b2:67:e6:b7:8a:d2:
         c8:ed:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----