Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File:                     S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier:          X38IOq6Pz0FK+FAv/255lEPE2hpcUDAY6HJp4Ic4z2k=
Subject key identifier:   C1:EF:9B:BF:FD:EE:2D:C6:63:A2:FB:B4:19:2B:C9:4C:71:27:29:21
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       01962E98B192A04634836DA9CF63E6C58D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: TNwdpkRZS96k6SHiB/kNN00jVJGj6lNuqb3SRh9cjKk=)
                          2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:92:a0:46:34:83:6d:a9:cf:63:e6:c5:8d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=c1ef9bbffdee2dc663a2fbb4192bc94c71272921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:90:f2:e3:16:04:d2:7a:f1:cf:60:9a:e9:
                    a1:c1:f3:e2:37:96:9c:fb:ea:83:88:9f:76:e6:c6:
                    c4:f9:b0:71:33:d5:57:e6:a9:0b:a9:af:8d:b2:52:
                    d5:2d:bc:3e:b7:a5:ac:9e:42:b9:a8:e8:20:49:8d:
                    af:91:7f:f7:bd:f1:e2:d9:24:12:1f:a9:b9:b3:d8:
                    fa:2d:d4:df:0b:29:f4:a6:d9:d3:87:42:93:9b:06:
                    1e:ed:89:87:18:92:06:11:57:ed:36:51:1e:46:ff:
                    74:e5:1c:f3:9a:89:ad:5f:2a:3b:a2:ce:00:20:8d:
                    d4:b5:04:7e:9e:02:fc:5c:05:dc:ff:e5:4e:50:52:
                    9a:87:f0:f3:75:c6:4a:e8:05:37:f1:b1:2b:cc:9f:
                    0e:57:74:0e:ce:51:43:4b:58:b2:bf:45:41:53:0a:
                    96:4e:4b:af:50:31:a2:60:f4:ac:35:0a:41:6e:9b:
                    17:f6:f0:a3:6b:ba:46:f4:71:b7:fc:7c:6b:5c:9e:
                    22:10:de:f3:0a:e2:e1:29:a3:2d:83:d4:3d:ff:a8:
                    9d:fa:22:00:ea:eb:7c:12:43:7e:9d:63:95:53:a5:
                    d5:7c:d3:20:8c:bb:2b:da:f3:9d:73:1c:9f:53:c0:
                    69:83:3e:b4:a7:f6:7c:72:05:cf:68:36:44:f0:bb:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:9B:BF:FD:EE:2D:C6:63:A2:FB:B4:19:2B:C9:4C:71:27:29:21
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:87:4a:0b:44:42:d8:e6:7c:77:32:73:25:97:d9:e0:70:bf:
         d0:e6:2e:10:a1:4c:0a:ca:32:cd:4d:81:fa:ff:4a:f0:c3:19:
         fa:8a:da:ea:fc:d8:c0:09:d4:f8:ba:ca:6d:f9:ab:2d:c9:86:
         5d:dc:a8:47:8c:00:57:26:d8:64:82:ed:b6:1a:b0:58:8f:09:
         4b:ee:f8:e0:c8:14:d0:bd:1b:7d:bf:de:c4:5a:42:3d:7b:19:
         ca:1e:fb:01:dd:0c:6f:15:fb:dd:af:5f:58:65:4f:54:4c:06:
         ce:36:5b:9f:a8:9a:ad:eb:57:2c:aa:ea:ba:df:07:25:21:3e:
         4c:de:2b:e6:9b:2f:fd:1e:16:b8:56:3e:1d:b3:aa:25:39:2a:
         cd:1a:d8:0f:74:70:88:d8:dd:db:f7:2d:73:7c:5e:4d:8c:74:
         f1:d5:e2:9d:76:52:03:cd:36:00:24:19:00:34:6b:83:89:c7:
         79:f2:12:22:68:a6:39:0d:91:01:9d:b2:f5:f6:62:61:54:24:
         35:52:0d:bf:f1:24:ec:bd:0b:ff:0b:d8:2f:16:aa:75:49:c0:
         b0:a9:00:14:29:0e:b1:40:53:b6:1d:14:fc:64:d0:25:a3:99:
         f2:ef:ca:48:23:81:8b:e3:0e:f2:a4:68:46:9a:29:6b:31:43:
         86:80:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----