Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
File:                     sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft (raw, json)
Hash identifier:          P+zX0i7bMdsfhppoMAAMqWntiXLIlOgiJnsDQlGyL8g=
Subject key identifier:   CB:0F:82:08:C0:EB:6A:F3:4D:53:E5:F8:15:B2:14:1E:2D:F0:1E:85
Authority key identifier: B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49
Certificate issuer:       /CN=b20663583a8189cbeaac88d438767997b1125549
Certificate serial:       01962DF3F12B1F6555811BC792D29E5B3AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft
Manifest number:          1447
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: fW2b4Mi4-jlU6WyOHwej57Bj7xc.roa (hash: gkYhGIaUuP9pIbVaUa+O+pFYYvku1Vu69Icl89ypkjo=)
                          2: sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl (hash: YrXOkkNrJztgAja3OhZ/GY4sLE+YcIs5P/Yxxtntp0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:2b:1f:65:55:81:1b:c7:92:d2:9e:5b:3a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b20663583a8189cbeaac88d438767997b1125549
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=cb0f8208c0eb6af34d53e5f815b2141e2df01e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:33:3f:77:9d:84:bc:e3:51:0f:2f:77:27:
                    d5:7c:08:15:39:1f:c3:ab:dd:df:5d:2a:c1:da:46:
                    e3:64:74:92:2b:90:10:8f:0e:9a:a3:df:ad:8d:03:
                    2c:73:42:12:78:86:af:17:00:18:37:d5:35:23:6e:
                    59:88:6c:10:55:54:ce:ce:ce:ae:c5:93:64:10:2e:
                    b1:a2:65:63:14:90:15:4d:1e:3b:1a:cb:6a:e8:76:
                    d6:40:22:9b:d5:5a:51:30:b5:6e:0a:92:a7:87:fd:
                    46:31:fb:b5:c1:d2:ad:d4:e9:de:dd:8e:51:4f:f3:
                    80:4a:d3:96:bb:7b:1b:04:2d:63:ee:23:b1:53:9b:
                    14:45:5d:88:af:1d:3d:6a:f2:4b:32:17:c9:b7:70:
                    72:b1:18:0c:8b:9b:5a:31:5f:1e:8d:3b:ab:4b:17:
                    d8:ee:bf:f3:b0:83:85:2a:82:13:14:28:59:ae:e0:
                    a8:cc:75:e0:d1:7c:39:60:72:fd:ff:da:64:9d:cc:
                    97:66:8a:df:06:b4:95:e3:25:47:a1:36:27:eb:2e:
                    15:cf:14:62:16:7c:46:3f:24:9b:28:ec:20:3b:22:
                    5c:c7:e9:42:68:4a:6a:65:96:91:c6:6d:29:5e:ea:
                    c8:5a:97:82:84:6b:53:a8:25:e2:b6:87:a9:32:ac:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0F:82:08:C0:EB:6A:F3:4D:53:E5:F8:15:B2:14:1E:2D:F0:1E:85
            X509v3 Authority Key Identifier:
                keyid:B2:06:63:58:3A:81:89:CB:EA:AC:88:D4:38:76:79:97:B1:12:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgZjWDqBicvqrIjUOHZ5l7ESVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef6f1a-6dfc-494e-b85d-d18773e7bc47/1/sgZjWDqBicvqrIjUOHZ5l7ESVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:66:1f:20:8e:41:24:43:9c:12:78:b0:21:de:4b:48:6a:
         e6:62:c0:b6:f8:ad:47:5a:e4:59:48:57:a3:39:6c:5d:39:01:
         b8:df:73:de:9c:2d:4a:65:32:d3:02:a1:9a:b7:15:c3:60:0c:
         ed:c1:fd:8f:db:e8:9b:1e:93:87:cd:1c:33:ee:85:ef:38:79:
         4c:c4:46:c7:93:7d:da:1d:bd:e7:5a:00:f4:77:f8:c8:d0:9b:
         b8:7e:2e:26:fa:5f:f8:53:2e:a4:72:41:36:17:9c:b6:b7:6b:
         ca:7e:e9:2f:48:ac:ef:f2:e4:d4:c1:75:4c:a0:72:01:4d:c6:
         2f:eb:cd:bc:df:a3:de:9a:38:d8:e1:3c:71:a9:ac:e1:ca:a0:
         e9:b9:88:6a:ab:63:db:ee:e2:51:f0:6d:98:5a:0e:de:48:58:
         a5:0b:c3:ea:0f:89:fd:c4:02:29:67:e2:28:fb:4d:4c:3a:e2:
         f4:9f:03:24:75:54:1c:d8:9d:a9:3f:a0:1c:6c:c2:30:b4:19:
         29:df:b1:52:07:ab:45:da:1c:8e:18:1e:90:af:04:00:ba:fd:
         26:86:2c:81:ad:0d:03:2a:5c:52:fe:c2:8e:14:48:52:88:0d:
         8c:98:f5:9a:ce:1e:e2:7d:78:26:a2:b4:27:14:85:35:c8:7e:
         3b:d5:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----