Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
File:                     SOBqNRpRibzcRIQJSNv7QKv1i-U.mft (raw, json)
Hash identifier:          8ZrTwKeOb6gP27l5JgDkg72P6qrazv6Z/QeznAtrjmU=
Subject key identifier:   99:A7:37:04:0F:E0:67:DD:BA:13:66:0C:B7:46:0B:F1:71:90:5A:11
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Certificate issuer:       /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial:       01962E990397C5EC3904382D15935EB1AE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: BrQq7YEFajNSVsBn6S_XP8bHPLY.roa (hash: egGSnJVF4ZpifdFK3Q0Rkj8+zW1UTdDs4D8hficQgOQ=)
                          2: SOBqNRpRibzcRIQJSNv7QKv1i-U.crl (hash: l8JvOHt71il1y/JgLltYw30gJZ2j6hPoeCZijmbKs/4=)
                          3: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (hash: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=)
                          4: _lfG9ESLsxXEgAvqTalwUEnKxms.roa (hash: noFmrTMo46tY2ivGlOMckm0NR1JVH9RLR85L6zlyDyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:03:97:c5:ec:39:04:38:2d:15:93:5e:b1:ae:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=99a737040fe067ddba13660cb7460bf171905a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:8b:ee:62:f3:e3:db:4f:9f:9d:d7:b4:96:
                    ef:b8:dc:95:84:fe:91:d3:d8:fe:d8:00:31:6c:3d:
                    45:59:3f:ea:7d:6c:c8:fc:2f:7c:7b:d2:e5:34:ee:
                    46:73:58:16:d1:77:23:c2:84:fb:b6:3a:6b:36:3c:
                    d4:19:78:20:64:93:cb:e9:c8:eb:72:fe:69:65:5c:
                    ae:88:db:44:1f:11:54:94:ad:09:7d:3d:6c:3c:0b:
                    7a:aa:d4:02:41:a1:2e:2c:70:25:55:93:d4:b5:fa:
                    80:8f:66:b7:74:19:c0:f7:6d:05:52:3a:3e:e8:b2:
                    e3:3e:57:1f:73:e9:7c:41:25:91:24:87:84:7a:f7:
                    e7:8e:b8:af:ee:dc:73:48:9a:f8:ab:23:86:a0:9b:
                    a0:fc:80:ca:88:a3:ef:70:be:d7:35:5b:83:f6:c2:
                    bd:5f:f5:38:49:c2:eb:de:18:56:c7:85:96:de:f0:
                    9f:42:5b:59:2e:90:93:df:b6:53:7f:58:d3:e9:9e:
                    71:3c:b4:e9:4f:46:10:59:fd:c8:c5:b8:33:4b:c0:
                    ef:ad:20:ce:03:f7:08:43:47:21:91:98:4a:ec:ff:
                    da:f5:59:39:ad:6f:ba:01:b0:c3:02:67:79:f4:6f:
                    24:ce:49:a9:ce:37:b0:4f:8c:dd:c2:6f:5d:c1:0b:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:37:04:0F:E0:67:DD:BA:13:66:0C:B7:46:0B:F1:71:90:5A:11
            X509v3 Authority Key Identifier:
                keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:9a:d9:0f:09:31:4d:5e:d7:a1:13:d4:f1:75:10:29:e4:
         a0:4e:2a:98:a6:2a:71:c3:49:bd:d7:b1:fe:d5:05:6c:0f:84:
         81:94:7a:2a:e9:0f:a1:29:de:2a:5e:d0:4f:23:0e:50:03:31:
         2b:c9:26:1d:1f:58:4e:d3:5e:1b:91:18:79:35:96:62:c2:f6:
         08:bb:3a:52:e7:a6:3e:b0:f9:5a:db:f0:07:74:9e:d7:2b:40:
         47:6e:49:e6:56:e2:68:fe:9e:62:f5:ec:b7:0f:59:64:17:c2:
         07:2a:1e:e2:99:03:bd:71:d4:49:4d:b0:16:f3:ef:bf:4c:a5:
         26:32:6f:00:a9:ec:8f:b2:f9:00:e4:49:95:04:3a:d8:72:34:
         a2:22:dc:63:8c:04:1b:20:b9:1d:55:72:5e:ed:4c:65:59:22:
         ca:b4:73:8d:45:4d:fd:54:62:50:53:d2:cf:ad:d2:4c:85:1e:
         18:cb:35:c0:19:b5:7e:2c:23:20:3e:e5:64:b7:b4:0f:d9:c9:
         1b:4c:93:41:12:30:fc:73:4f:02:2a:ce:da:2e:7a:fb:38:7e:
         54:85:33:b8:58:f1:ed:8b:cc:8e:4b:c7:f7:cb:6b:a6:04:47:
         53:a9:ae:6a:1d:09:f0:4c:dd:b0:38:ca:cf:8b:4c:b8:40:ff:
         e1:7b:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----