Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File:                     sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier:          1qpbEjcWOh2k+5MoAPo3vfM0iLmhJGjmUe4glYnGkWM=
Subject key identifier:   B8:E2:9B:01:9D:FE:B2:1E:D4:38:73:F5:3A:57:11:31:C5:81:71:E5
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer:       /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial:       01962E2B187311CEF5AFE7DAD51981F7424F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
                          2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
                          3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: eLD2h6Ny2rDimct3l9JlDHK662rw/MczDhvnrbZVWwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:18:73:11:ce:f5:af:e7:da:d5:19:81:f7:42:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=b8e29b019dfeb21ed43873f53a571131c58171e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:38:d7:0f:a3:ad:71:30:13:a1:62:50:48:
                    c6:e7:6b:4a:4a:02:69:8d:2d:57:a9:d7:73:aa:db:
                    f9:da:2b:00:8a:3c:c1:7b:fb:bb:cd:af:5e:ee:f9:
                    9b:00:73:85:6a:3c:b0:15:f2:15:18:63:6c:1b:10:
                    a1:73:53:85:b6:dd:8e:58:85:8b:14:1c:f6:e4:04:
                    73:ff:b1:2e:cf:46:6e:0a:f5:ee:72:3a:1c:81:f4:
                    d3:f2:ac:ef:32:b2:e1:af:93:e2:19:8c:61:7f:98:
                    9d:7c:e7:f0:01:f8:5b:96:86:f0:77:93:fb:eb:41:
                    58:e0:46:36:2f:76:30:3d:24:67:0b:67:0b:9c:10:
                    d5:b6:57:9e:3f:81:b3:69:b6:c5:57:97:58:26:4f:
                    36:63:09:91:aa:ac:0a:d2:cc:0d:63:aa:63:d4:8e:
                    f4:6d:0e:d5:05:9a:0b:95:31:16:ae:ef:e7:e9:88:
                    db:71:23:0b:0a:83:a7:68:f4:30:5c:59:f2:ac:c6:
                    1e:b0:d7:7a:8e:16:84:90:c2:f1:b5:9c:3e:06:60:
                    63:6e:f6:50:4b:7a:3d:2c:28:e4:90:ba:65:b4:7a:
                    6a:55:57:78:61:bc:16:1d:fe:f1:20:e2:55:19:ce:
                    66:0d:bb:48:9e:48:79:05:bb:d3:c5:f3:d6:3c:7a:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:9B:01:9D:FE:B2:1E:D4:38:73:F5:3A:57:11:31:C5:81:71:E5
            X509v3 Authority Key Identifier:
                keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:ef:ae:64:8e:0c:11:6b:f1:74:78:d5:23:30:fd:a9:86:
         6c:a1:5c:2e:17:46:86:70:c3:d0:b6:94:f2:5d:f8:ba:50:e8:
         c8:1c:9d:03:b4:a4:24:77:8b:2d:da:32:9e:42:d1:11:88:94:
         3c:93:69:db:42:3b:b2:01:d2:ae:0d:04:2a:c5:77:ea:5c:f5:
         1c:26:b2:5e:be:50:58:06:38:ad:72:56:ab:af:86:ad:a6:1e:
         17:5f:2c:41:20:45:71:bc:57:0b:c7:26:4d:d3:f0:de:7c:f8:
         09:63:3a:33:6c:ac:2b:a7:f2:f2:df:ea:08:ce:d2:01:8c:ba:
         a8:47:80:f2:a5:27:9b:04:96:87:3a:52:a0:8a:f3:0e:6e:28:
         13:44:59:65:16:4d:dc:30:5f:f1:1d:66:05:fc:23:74:5d:2d:
         ad:e9:e4:cd:9d:b6:15:93:cd:c5:d9:a5:55:27:6b:50:bc:59:
         ee:65:a9:c8:72:6e:4c:c3:6c:9a:88:f3:f1:9f:6c:22:74:e2:
         12:bc:7e:e2:20:88:2e:ec:46:25:1c:0a:1d:45:96:9a:97:b4:
         8d:d2:0f:05:58:4b:86:a0:04:cf:09:69:60:af:09:78:6e:7f:
         c7:ef:4e:e5:be:e0:9f:ab:df:9a:02:1e:29:ab:17:26:e4:81:
         73:3e:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----