Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
File:                     SksX0DK5-19-W8n9Jo37gO3u0h0.mft (raw, json)
Hash identifier:          JZRhnQt8kRI/DKuc9BXMvPU4138fO0VUknaEXYketHo=
Subject key identifier:   DB:D9:48:0B:99:26:24:66:FB:3F:C4:9B:55:9D:88:87:5C:DB:BF:2E
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Certificate issuer:       /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial:       01962ECF756084AEA959B4C544A18A5057EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
Manifest number:          1407
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: SksX0DK5-19-W8n9Jo37gO3u0h0.crl (hash: lvzWgK9oJgZ1E0EiwbPzoZPhFBd0jfr8FscpQIkdLcc=)
                          2: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (hash: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:60:84:ae:a9:59:b4:c5:44:a1:8a:50:57:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=dbd9480b99262466fb3fc49b559d88875cdbbf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:75:bd:b9:93:f2:78:c6:80:0b:a5:de:79:
                    89:7b:75:9a:30:4d:68:0c:c5:e4:78:ed:21:67:76:
                    94:f3:bc:32:bc:b2:84:97:c3:f2:aa:39:cf:5d:70:
                    0f:7a:8e:af:19:c1:2d:ce:58:a2:0c:d8:1b:a4:4f:
                    e5:0e:97:b1:f6:67:30:61:f5:e4:eb:6f:b0:68:3d:
                    ba:a4:b1:40:ee:1a:15:58:ba:8c:96:14:5c:fb:e4:
                    ea:01:89:0f:75:fd:a4:66:1d:cf:88:e5:e0:65:b5:
                    c9:27:9d:be:d5:ae:3a:25:75:75:39:72:07:a5:68:
                    6d:b3:31:c9:2e:d1:55:ec:5c:91:e9:f8:d4:6c:09:
                    ca:2e:70:48:e5:6d:c0:09:1e:af:d3:85:a8:a7:fa:
                    f4:92:5c:e2:45:9d:45:4b:eb:0a:86:bd:a1:df:df:
                    05:13:39:6b:f7:fc:f9:6e:7d:28:e8:55:e9:e1:0b:
                    ab:78:70:77:61:b0:a3:39:61:70:78:d7:79:01:31:
                    22:5f:3f:fd:3a:79:c9:67:cd:78:3c:71:6f:b9:02:
                    b1:b2:60:11:5c:cc:8e:1f:15:51:78:2e:4d:06:21:
                    87:59:94:7d:07:8e:04:8c:7b:69:08:9c:0d:48:25:
                    82:d9:6c:61:ce:40:e4:81:38:af:d9:9a:30:16:ec:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:48:0B:99:26:24:66:FB:3F:C4:9B:55:9D:88:87:5C:DB:BF:2E
            X509v3 Authority Key Identifier:
                keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:89:47:29:b5:00:63:79:a5:30:6e:6e:b1:13:20:3d:50:
         05:49:79:0c:b4:2b:7e:75:d6:32:be:e1:f1:92:bf:f4:89:88:
         20:f9:e0:c5:1a:4f:ee:c5:61:e6:80:41:80:b5:ee:dc:b7:50:
         03:26:17:83:82:80:5c:a1:bd:5b:08:e6:2f:7a:96:1c:52:bb:
         fd:41:74:ab:bf:5f:f1:44:b8:28:00:3b:3b:bd:04:f1:d0:05:
         84:41:6d:f8:74:4c:ee:7b:12:13:8a:97:6e:ab:cd:a1:a8:55:
         69:37:e7:55:12:c3:64:df:74:7e:4c:c3:0e:5c:5b:da:8f:d8:
         32:21:de:b7:26:7b:cd:c5:ad:a3:0e:6a:0a:fb:50:b8:5e:6e:
         8c:da:06:b3:02:11:63:4b:1b:1b:d8:45:61:ee:d3:01:ef:31:
         3f:a7:bd:c2:49:c5:81:0e:8d:8a:a0:c5:f2:b4:b8:b7:5c:b5:
         90:8a:c5:1b:6a:b0:18:44:f9:02:4a:a8:f0:2b:9a:0d:54:ff:
         9c:33:14:89:24:3c:25:be:42:2a:b0:2a:64:5e:81:9c:e1:dd:
         77:c1:9c:b8:2a:10:d3:85:76:36:e4:24:f8:c2:83:aa:1e:dc:
         a0:33:db:6d:6a:3f:a1:71:33:d9:54:ae:f3:34:85:4c:a8:52:
         e7:3f:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----