Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File:                     sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier:          FCtVkpt93HySz4UlK2sNtsUoUe5A2VKiCzMF1CXPJ14=
Subject key identifier:   38:E2:5F:40:2C:BE:6C:97:92:E1:AD:7C:23:E6:74:BE:80:59:DD:BD
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer:       /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial:       01962ECF66D203031B22E612A2728262CD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number:          13BA
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
                          2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: XYoMaYSGZ0xs3waOBCm6Xzojl6obouN7z6i3UFV9cG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:d2:03:03:1b:22:e6:12:a2:72:82:62:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=38e25f402cbe6c9792e1ad7c23e674be8059ddbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:80:e6:46:11:7b:30:d5:32:fa:c6:1f:7f:
                    be:27:3a:c2:26:ef:78:89:1f:22:95:28:ab:3a:95:
                    7c:6c:37:56:a6:27:51:a1:31:b1:ea:e6:dc:d6:fc:
                    f0:36:82:0a:c2:63:52:aa:27:35:03:06:3e:ad:7d:
                    65:a3:06:35:44:d9:4f:19:fe:d5:a9:aa:fc:da:f2:
                    55:b7:6d:9e:0b:84:dd:25:ce:dd:f2:cf:71:68:7c:
                    e4:4b:1d:db:5d:81:b6:14:06:b1:a7:51:03:28:c9:
                    3b:64:b6:80:9b:39:c8:e8:0b:57:59:cd:96:e9:f2:
                    af:12:a2:5b:f8:96:42:9e:79:fe:7a:10:6f:52:b1:
                    11:84:33:68:87:6b:f7:dd:b9:5a:09:ac:14:0b:87:
                    72:54:5c:af:67:c6:a0:d5:c4:de:12:86:77:84:54:
                    74:ad:fa:b3:9a:52:f9:66:df:d9:0c:56:02:51:17:
                    28:75:3c:89:0a:e5:eb:d5:2a:2b:23:39:ba:f0:81:
                    d8:0e:4c:f1:e7:7d:bc:5c:4c:2d:c3:0c:02:98:ad:
                    06:6e:09:a9:89:1c:75:c5:1c:a1:dc:4f:94:02:2a:
                    f6:ed:4c:a8:c3:48:4c:d2:e5:8b:33:43:41:f1:95:
                    34:cf:ca:34:d6:23:e4:90:bc:8c:f2:68:b9:12:e4:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E2:5F:40:2C:BE:6C:97:92:E1:AD:7C:23:E6:74:BE:80:59:DD:BD
            X509v3 Authority Key Identifier:
                keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:45:39:f4:69:25:4a:10:0d:a9:ea:ed:19:20:87:bd:59:
         27:82:e1:f6:18:21:8a:6d:51:31:df:04:4e:14:ee:e4:e1:35:
         56:f1:0f:71:65:35:e4:69:23:68:92:a0:37:74:1a:09:91:0f:
         fb:bc:bf:0c:68:4b:d7:bf:81:16:cf:e8:2c:89:a9:92:73:ce:
         9d:03:09:57:d1:a9:4a:fe:4f:92:ea:ac:ea:15:ae:8f:ab:3b:
         ad:9c:28:a0:26:43:12:ba:31:77:94:ed:97:70:e5:21:c0:38:
         88:08:7f:13:e4:f2:ec:e9:58:56:73:0d:da:64:cc:74:81:00:
         76:89:34:11:4f:30:40:0f:42:85:c8:6a:91:78:f1:19:c6:e5:
         ce:7a:ad:ea:7f:b0:5d:16:fb:d2:62:98:80:53:a3:f3:a7:7f:
         d8:d4:46:2b:1e:d1:97:3b:8a:7b:cf:1d:41:75:f7:6b:7b:5d:
         38:99:17:38:d8:85:89:08:00:54:92:30:12:bf:72:6f:cf:25:
         b0:7c:aa:f9:cf:aa:c5:05:74:e3:9b:6d:c8:d5:e7:52:c8:df:
         1d:79:95:06:bf:8c:85:d0:a2:fa:5e:47:42:ae:34:fe:0b:d1:
         12:8e:ab:ff:9f:de:a7:ea:a7:af:b3:c1:99:14:9d:03:5b:96:
         56:11:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----