Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          MUVjmqvWW2u5lldyEFxnT58gwJYoB1vUmsXPBAODP0g=
Subject key identifier:   31:AD:5F:9C:14:E6:F0:29:AB:58:08:EA:B2:E9:5F:51:F7:62:04:F4
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       01962F745F42854E2C428C1B1374A4B7943A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          12A2
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
                          2: 8v_aiBgvpLDJT4bE3zxJWwrf4Ao.roa (hash: wcB7NvMB7REyv6Xd72Vh3AOoxDTtyyThVZ07XtgTGL0=)
                          3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: 5Awtw8O162W+b0sDnyY/8gd6++i2K1bHQ7wTrmtgNQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5f:42:85:4e:2c:42:8c:1b:13:74:a4:b7:94:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=31ad5f9c14e6f029ab5808eab2e95f51f76204f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:4d:f1:b2:62:88:cf:ae:b8:ec:86:4d:e5:
                    68:b5:11:d7:7f:02:3f:5f:e1:be:44:fd:50:9a:7e:
                    76:18:3d:80:1c:4f:6e:a2:38:c0:9b:8e:5a:e4:d1:
                    da:ff:5b:ea:fb:d9:c4:63:13:72:09:cb:73:a2:a3:
                    91:a7:f0:e1:96:64:c2:d5:fc:d6:da:a0:fa:48:28:
                    8c:f7:de:9a:bd:18:a4:94:73:8a:f9:c4:97:94:e7:
                    10:b9:ae:39:72:0a:7a:4b:79:fe:a1:c1:37:e7:ef:
                    1f:fd:5e:2a:5b:ac:3c:af:8a:89:02:10:6a:c7:52:
                    6a:48:c5:97:77:4c:6f:5a:ae:db:1d:11:84:2d:a3:
                    96:c5:01:61:07:b4:3a:fb:d9:58:4e:ed:97:99:0e:
                    fa:25:9e:ec:d9:c5:27:d9:a7:37:39:c6:92:51:ed:
                    40:d2:b6:5e:95:5c:65:8a:64:32:6d:46:f2:16:10:
                    90:57:22:3d:29:57:33:6f:17:80:be:05:43:d4:d7:
                    44:84:10:b4:3e:14:c6:45:97:f3:38:7b:54:27:c2:
                    27:cd:10:1a:12:d1:aa:ee:01:6e:17:aa:e1:5d:b9:
                    1f:ac:77:da:42:11:28:e0:eb:e4:5f:2b:c4:60:74:
                    8b:d0:ef:ad:ca:de:45:ef:3c:16:1c:e6:16:95:3a:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AD:5F:9C:14:E6:F0:29:AB:58:08:EA:B2:E9:5F:51:F7:62:04:F4
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:8a:d1:31:33:e6:24:5e:37:24:d9:b7:d6:6f:43:1c:e6:
         97:c9:27:5e:0e:ad:63:1d:2e:76:b3:63:3a:b6:37:65:76:11:
         c9:2f:b7:57:53:39:32:f9:80:8d:1a:ca:09:97:ef:0a:5c:f4:
         c3:a2:93:e4:00:53:c2:92:10:b3:70:72:1a:00:ff:dd:b7:05:
         b1:ba:4f:5f:b3:ee:9d:11:af:1a:f2:18:04:a3:12:ac:f7:2d:
         f5:e2:6c:08:1f:d4:04:e5:ee:9e:87:46:e1:df:fa:be:cd:0b:
         52:4b:5b:e6:d7:d5:ad:4e:c7:f8:6e:b0:f7:b7:cb:3b:3d:a5:
         b2:32:f0:05:2a:37:7a:7c:76:cd:06:ce:9f:1f:1c:e2:ad:6b:
         d7:9d:ad:6a:26:9f:04:20:f5:80:8f:fc:1b:c8:61:75:8c:dd:
         1c:32:f4:9b:98:27:fd:15:d4:f6:ec:6c:ca:d9:5c:5b:c3:b8:
         c3:3d:60:96:a1:a1:49:9f:bf:41:23:88:9c:71:22:4a:a8:75:
         28:5b:63:86:e9:17:f8:4b:02:19:85:e4:0b:e2:1e:4e:f2:b4:
         68:e4:f9:f3:69:fc:32:95:b6:4f:2f:51:96:49:55:67:42:41:
         0e:d5:d8:39:f9:26:ed:93:59:7d:33:ca:49:ae:0d:3a:73:75:
         0c:84:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----