Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File:                     sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier:          7d1jeENuGpDQHf7ssXMNLVlVc88kS/tXzdGA/xkKBUE=
Subject key identifier:   72:21:1B:21:CD:74:2F:1F:C0:92:7B:0D:AD:85:73:F6:CA:12:F4:54
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer:       /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial:       01962FAB64D2C6806822DC1AA043213197C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number:          0B7C
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
                          2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: ErslP7M0k9+4DrsS31fvqSR+LqfxN7g5PVGauI431sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:d2:c6:80:68:22:dc:1a:a0:43:21:31:97:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=72211b21cd742f1fc0927b0dad8573f6ca12f454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:7a:1d:3e:27:f7:fa:98:a5:7f:35:f3:37:
                    18:21:73:2d:96:fb:0a:06:6c:cd:22:9a:31:db:77:
                    ee:f4:88:fe:5a:4c:25:1d:e1:fc:bc:83:06:24:cb:
                    28:7f:ac:36:05:7c:52:66:f6:0c:89:ab:16:19:8b:
                    6d:d6:05:ae:39:d1:41:71:c7:c5:3b:5c:8b:86:69:
                    ed:17:08:6e:7f:f2:bb:ee:27:9d:d6:00:15:d5:38:
                    cf:60:4b:a6:af:b6:b4:df:13:59:8d:1b:a2:70:1b:
                    6d:1f:41:a3:71:20:49:9f:d6:1c:55:28:7a:c9:0d:
                    90:35:08:53:41:ce:48:27:a7:bf:ac:7d:90:db:a8:
                    7e:4f:0f:bf:06:b6:90:d7:56:60:c2:da:49:8e:e5:
                    11:6e:83:8f:ec:89:4a:4c:aa:1b:cd:32:91:b2:20:
                    41:1b:b5:30:ee:c0:21:35:1e:fa:d2:a3:dc:9e:a6:
                    29:8e:e7:23:33:ea:73:60:93:3a:71:e1:ea:b9:d2:
                    ee:28:23:c5:d1:07:50:56:05:39:7c:b4:f6:b6:76:
                    aa:ab:10:49:2f:a6:04:e7:92:82:d8:98:f0:73:04:
                    43:1d:6c:3f:de:5c:20:c9:3c:63:37:fb:28:bf:a2:
                    86:6c:21:0e:17:45:fa:11:77:23:93:d4:c9:52:c1:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:1B:21:CD:74:2F:1F:C0:92:7B:0D:AD:85:73:F6:CA:12:F4:54
            X509v3 Authority Key Identifier:
                keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:5c:73:2e:a1:f6:e6:f7:53:76:95:f8:89:70:f1:3f:f7:
         b7:7d:80:f7:85:31:62:92:5a:cb:b8:df:8e:dd:26:74:8a:55:
         15:ab:6d:c1:1e:34:ab:5c:32:be:34:45:65:e2:04:96:03:29:
         43:04:62:de:f2:a7:2e:5a:56:22:9b:a1:52:b0:e2:c6:b5:0c:
         15:ea:cf:3a:27:c5:b1:06:d2:9a:8e:30:58:b5:64:b6:69:9b:
         9f:f2:97:e2:5e:c2:42:1c:e5:df:45:3f:f6:ef:a9:ba:e4:84:
         a9:11:b3:5f:fc:4e:50:e2:fd:ff:ed:2e:a9:76:45:8f:09:1c:
         b5:ff:c4:7d:18:a3:36:21:71:9c:0e:3f:7c:72:ce:5c:a1:12:
         bf:a2:64:28:f6:be:d8:81:fd:0c:f7:af:01:cd:7e:00:47:ff:
         5f:d5:cf:53:87:30:64:a1:61:12:b5:1f:5f:c1:4a:29:fd:43:
         88:08:d3:49:cc:1d:12:9b:ab:b9:b7:e7:a5:4e:84:2e:eb:c1:
         f2:93:ac:79:be:fb:dc:8f:01:de:06:43:b4:bb:4a:b7:5a:16:
         ec:4c:83:ff:89:33:24:e1:ff:7e:45:37:3f:de:27:50:89:de:
         e5:b7:ec:65:7b:f9:a4:7d:2d:a7:b6:41:82:39:75:bd:71:c9:
         8b:bb:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----