Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File:                     B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier:          Hx3qKpNZHNfRV1IwM9RyybcPKxpCH3GEFOd9zveKmU0=
Subject key identifier:   60:A1:71:10:0B:E1:2E:28:2E:09:3A:8F:0B:7E:E4:3A:9A:02:3F:61
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer:       /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial:       01962ECF8A4317D012B42A1D10C7B854389F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: 5l4Js9YNQuge3q5nsY148WWanABPa2x6xjF8FEUYNHU=)
                          2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8a:43:17:d0:12:b4:2a:1d:10:c7:b8:54:38:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=60a171100be12e282e093a8f0b7ee43a9a023f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:67:53:ee:e2:9e:8c:be:84:73:83:fe:0b:
                    cf:b8:2b:4f:05:96:d2:06:ab:79:ed:8c:8d:b8:4d:
                    85:b0:2d:b2:fd:f8:44:89:48:22:b3:52:76:5d:dd:
                    3c:f6:a0:c0:38:53:21:7a:17:4a:1c:9d:0e:2b:c0:
                    f5:ee:1e:6e:6c:3e:11:50:02:71:5e:89:ca:14:96:
                    43:f0:53:cb:05:3a:b0:09:f3:d3:ff:3e:b7:78:62:
                    6d:01:47:3f:fc:23:bd:cf:b2:26:23:87:f8:84:07:
                    97:71:ed:84:14:54:c7:eb:cd:75:20:97:26:8a:d9:
                    7e:83:90:78:93:95:e2:2e:36:d5:fa:08:d7:76:49:
                    5d:72:d7:2b:9d:65:cd:3a:50:f0:24:0a:c7:c1:d9:
                    a3:09:92:00:cb:ec:b6:61:fd:34:55:51:c2:9e:bc:
                    09:93:52:bf:66:88:93:47:8f:3c:e2:e6:4c:2c:60:
                    f9:a1:34:72:5d:ee:c4:d8:de:d4:34:b1:e4:06:e0:
                    f5:3c:fb:64:ec:f5:94:de:8a:54:0c:bd:da:cd:50:
                    aa:72:13:77:26:66:d6:b6:76:8b:3f:f1:d5:ae:8c:
                    0a:e6:99:3a:0b:c2:d6:f7:fb:3a:4c:54:40:20:bf:
                    bc:b7:9f:41:ce:37:a9:2f:c1:93:cf:2f:23:00:b4:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A1:71:10:0B:E1:2E:28:2E:09:3A:8F:0B:7E:E4:3A:9A:02:3F:61
            X509v3 Authority Key Identifier:
                keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:99:0d:21:fc:58:db:e3:67:b5:c3:b0:1c:05:c6:c7:1e:a2:
         44:15:67:bd:6f:64:87:c7:e9:8e:8e:5f:1e:a9:ee:20:b2:fc:
         33:f6:f4:43:a3:15:d7:0b:17:ad:f2:3c:ab:8b:88:80:9a:dc:
         b6:68:1d:f6:be:a3:e3:8f:52:a8:0d:88:36:58:ed:78:1a:39:
         92:d2:5f:0c:12:34:03:4c:eb:89:9d:23:42:ec:82:5a:4d:53:
         16:ab:73:bf:b3:2d:91:24:44:80:a0:e6:0b:fe:92:34:f4:24:
         66:b4:15:27:15:6f:6f:b5:87:49:2a:5a:d3:d3:d0:e3:83:39:
         63:d4:ec:96:64:2d:15:07:6d:fc:3a:aa:0e:3b:f3:e0:67:29:
         38:a7:d6:f8:a4:78:7c:55:da:0e:b9:45:2d:45:ef:24:80:3b:
         b2:1d:38:31:b5:6d:58:e4:a1:f1:67:67:39:c0:3a:9d:eb:8a:
         e2:07:55:4c:8d:c2:92:8f:6a:b4:ff:0a:92:a6:e0:67:5e:ef:
         b1:6a:12:c1:29:d8:97:65:a8:62:8a:9f:d8:61:38:de:ce:a6:
         5a:78:37:eb:4e:7d:d3:13:c1:80:6d:14:6f:28:00:e4:a5:ca:
         45:5e:76:9e:2c:92:fe:f1:fa:41:83:11:92:cf:ea:1d:32:8f:
         9e:57:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----