Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File:                     sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier:          Qs9fgrs9pfpn1zL6QCfZvllpos0ei6aDuL5fw6r7Hn8=
Subject key identifier:   07:9C:10:7F:B7:43:88:06:B4:6E:66:F1:8F:6C:B9:A6:B1:5D:E0:63
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer:       /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial:       01962E990BCA1F8FAAECC7741A44273A388E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number:          128E
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
                          2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: q8x4aZEmUU1FmhETQMjbCiWoRBiyHkn7cpGSI0qJUt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0b:ca:1f:8f:aa:ec:c7:74:1a:44:27:3a:38:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=079c107fb7438806b46e66f18f6cb9a6b15de063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:ce:06:71:7d:11:05:e4:c0:97:c5:1f:93:
                    b4:31:40:d1:94:3c:03:ca:6e:96:6f:28:1c:50:49:
                    12:e6:44:73:e2:03:3b:8e:50:c3:fd:03:c6:56:10:
                    1a:e9:42:a5:2d:e9:4d:46:66:dc:ed:57:d4:15:6b:
                    5a:67:0f:9e:39:52:9c:a5:c4:0f:13:d7:aa:5b:41:
                    8d:3a:2b:72:37:db:0e:6c:42:c5:ec:7f:d9:93:5d:
                    55:47:e1:e4:02:24:56:65:38:1c:d7:36:4d:e1:44:
                    dd:fc:47:0c:ab:f1:fd:5b:5e:e1:af:cb:76:2b:6d:
                    29:01:f7:ed:70:1f:98:76:1b:90:17:81:32:5c:b6:
                    a3:79:ae:e7:22:06:22:32:aa:1f:a7:99:59:0c:b8:
                    8e:38:e6:ca:f7:09:22:5d:37:69:f6:73:5e:56:44:
                    77:f6:78:08:75:19:c6:2d:79:ce:3b:d0:0c:e4:0a:
                    fc:86:59:a9:90:10:5e:07:13:c6:dd:11:ee:a4:1f:
                    f3:ea:65:71:95:b5:d8:50:6f:98:02:e4:56:bd:49:
                    60:63:84:90:3c:dd:e0:9e:c4:ec:6d:57:40:a5:93:
                    46:98:f3:bd:d0:84:5b:f9:c5:99:3d:e8:e1:1d:87:
                    25:51:3e:6e:03:8f:20:55:e9:91:f2:a7:8b:84:04:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:10:7F:B7:43:88:06:B4:6E:66:F1:8F:6C:B9:A6:B1:5D:E0:63
            X509v3 Authority Key Identifier:
                keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:28:e9:f7:a4:4f:cb:e5:91:f6:8a:46:ef:98:e0:12:39:
         c5:ca:36:bd:70:fc:6c:6e:dc:24:1e:a5:a7:3f:59:b5:05:c7:
         48:1b:49:68:94:a4:56:90:6a:59:dc:43:f0:dd:d9:b4:da:f8:
         77:53:af:21:ee:d2:07:0e:92:e7:b3:e2:97:97:c5:aa:49:20:
         58:ff:06:83:a7:6b:b3:a3:81:e4:e4:78:1c:c2:b4:ca:83:93:
         47:71:2b:20:43:e9:e4:7e:31:d7:17:3b:fe:20:11:65:2c:57:
         06:06:16:01:4d:e6:99:60:f0:f4:ce:4c:39:25:56:31:b3:a5:
         99:b1:fe:2e:3f:52:38:3b:53:b1:60:1c:57:64:1e:c8:d0:39:
         38:dd:87:15:60:76:a0:e2:7f:e3:36:f3:8f:e7:19:1f:df:30:
         78:e8:f9:37:51:a9:c4:f5:6e:10:bb:4d:cf:da:14:6e:21:65:
         ef:ab:56:4d:59:9e:6a:07:bc:ab:05:45:57:94:c7:f0:3f:24:
         de:b3:b8:c5:91:47:f8:07:06:8e:21:97:30:6b:df:4d:c6:b9:
         5c:f2:f6:cf:db:ec:e5:91:9f:90:fe:34:82:ae:97:38:9d:d5:
         c1:70:87:58:e6:01:ea:10:16:f1:66:06:c8:83:27:c6:06:0d:
         bd:49:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----