Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File:                     sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier:          3v5bGLsRRAkRtA/MlJB13ba3M8OyDJYgxy+E4pRpiu4=
Subject key identifier:   7E:8E:0D:25:A9:EE:18:0E:17:2A:18:51:0D:8B:AB:1C:5D:98:3C:FB
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer:       /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial:       01962E61A39E5FCB3F67AE57E0FB684EC7F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number:          0869
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
                          2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: dU5yb5g/D7Wc+KJwWZCOCEUt5e047U4GAh+uWxwE60c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:9e:5f:cb:3f:67:ae:57:e0:fb:68:4e:c7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=7e8e0d25a9ee180e172a18510d8bab1c5d983cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:76:38:79:71:cd:21:0c:ad:d1:b5:54:e6:
                    ca:bb:f7:13:32:8e:40:f6:a5:63:0f:2d:3a:dc:ea:
                    d7:1f:16:f9:dd:da:5b:ea:bd:9c:24:0e:14:e4:6d:
                    72:10:54:f8:95:09:03:16:14:e9:4f:a4:04:e9:71:
                    fa:37:1b:c8:f3:03:20:3c:ca:36:34:88:fa:60:ff:
                    49:f6:9a:5c:c5:71:7b:0c:02:9c:9d:56:2c:25:d2:
                    e2:67:47:3e:18:14:93:5e:f4:52:b4:f8:10:7b:97:
                    9f:60:36:fd:48:b1:54:3a:c7:19:bb:4d:e8:dc:f6:
                    08:cd:9b:99:f0:3f:81:3a:1a:00:e1:48:c3:9e:fe:
                    10:59:47:5d:07:f4:4c:75:10:c2:f3:89:3d:f4:34:
                    3f:a6:f2:79:b2:14:ee:4f:2a:da:e3:54:ca:47:27:
                    24:ad:a6:83:5d:25:67:31:dd:2f:0c:7c:34:85:90:
                    b9:6c:81:95:89:f6:66:e8:7c:82:31:f0:04:32:57:
                    1f:2f:62:17:ad:d9:35:81:3e:6a:43:24:e2:02:79:
                    dd:10:b5:bd:55:74:b5:79:62:6a:08:98:60:f9:1c:
                    93:c0:08:91:21:c5:2b:b5:14:22:b4:c5:c3:55:d3:
                    b1:6b:ab:b1:0f:ca:12:5b:ef:1e:36:f9:fe:97:e5:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:0D:25:A9:EE:18:0E:17:2A:18:51:0D:8B:AB:1C:5D:98:3C:FB
            X509v3 Authority Key Identifier:
                keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4b:ff:bd:e4:b2:15:85:93:11:58:38:49:1c:7e:cc:42:dd:
         d9:ad:80:92:b3:98:2e:bd:7d:60:6b:a8:c0:84:bc:ef:91:64:
         f5:28:ff:1c:0b:ba:47:53:50:7d:26:9d:54:af:bc:6f:a3:be:
         93:54:4a:c6:9c:ef:5a:56:51:6b:b9:7f:72:4f:7c:3c:c6:8c:
         2c:52:02:cc:16:e6:96:ca:22:6e:55:db:83:36:05:d7:2f:cb:
         1b:99:ab:63:b3:c2:3b:bb:db:09:ff:a6:19:b0:a5:58:90:7c:
         f6:4b:a1:b7:3d:0d:4d:06:c9:4a:2f:17:6b:01:4b:96:ef:34:
         c2:ab:4d:64:94:f3:74:4e:29:5c:b3:7f:d1:9b:1c:cd:7d:15:
         fd:ea:7a:92:db:10:ec:6b:8b:b1:16:e9:ba:84:1e:d0:44:49:
         99:fd:59:ab:36:90:a5:2b:69:5b:cc:1f:23:69:32:e1:80:d5:
         99:7c:82:c1:c7:80:01:24:bb:62:2e:98:57:b9:71:f3:c4:ed:
         02:bb:d0:69:61:01:f2:88:5f:5f:6b:6b:d8:31:a8:fd:5c:1e:
         88:44:9c:4b:72:42:38:6d:47:f9:7a:91:d7:f5:80:c7:8a:3f:
         02:b3:64:a0:6f:a3:dc:e2:b5:2b:b5:f5:ab:67:20:a4:1f:12:
         65:16:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----