Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File:                     sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier:          Om9mOGGJnr+nGOBudqdO7Rb8Qr6fK83wzDFqyyx7nKM=
Subject key identifier:   9C:E8:50:32:04:3D:18:56:55:65:5D:CF:0B:6F:48:5B:AB:2D:F5:4C
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer:       /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial:       01962E2B1E3FA5C70EEDE2243A9758BD77D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
                          2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: +HQXicPTzP7+H1Ga+2pZPuWq9WEYcbGsE3IHiDJXunk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1e:3f:a5:c7:0e:ed:e2:24:3a:97:58:bd:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=9ce85032043d185655655dcf0b6f485bab2df54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:76:5a:14:ca:c8:e9:a4:fc:12:31:a0:5e:
                    78:2a:e0:8b:2e:7b:78:3f:fd:d1:8e:0c:05:2d:be:
                    b7:ef:e0:7e:53:18:39:0b:f1:d6:22:17:ec:40:de:
                    b2:18:1f:9c:27:a5:d3:94:68:d7:be:3d:43:55:4e:
                    ec:24:5d:bf:ea:f0:e2:99:e5:f4:86:74:22:f3:05:
                    b5:ef:54:52:c7:17:b3:28:6d:a6:28:04:14:7b:4c:
                    f1:7e:65:47:59:83:32:53:f6:76:8a:f6:25:ce:f0:
                    f2:10:f1:b3:2d:48:84:5c:16:be:1e:53:62:dc:d6:
                    84:ca:5a:1f:5d:a5:23:07:59:cf:14:65:1f:52:15:
                    31:f8:ff:55:e2:fa:18:7d:77:ba:8c:1c:10:0c:e6:
                    29:fb:d2:95:6a:be:da:6b:81:d3:b0:f4:31:fa:ba:
                    7d:8c:68:9e:49:f9:a0:95:bd:c4:84:3d:b8:14:c9:
                    c2:12:77:25:01:51:cf:60:2a:00:a8:1b:27:f1:d9:
                    1d:ee:e0:54:c1:ac:bb:52:35:24:d8:5c:76:1d:52:
                    c9:bd:0a:3f:16:d8:3d:29:c1:7f:5f:8e:d7:cc:57:
                    24:ce:82:0f:bc:cb:2d:da:cd:6a:f6:ec:24:41:09:
                    94:d3:25:60:2a:9d:1c:a8:7b:21:45:1e:52:22:a3:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E8:50:32:04:3D:18:56:55:65:5D:CF:0B:6F:48:5B:AB:2D:F5:4C
            X509v3 Authority Key Identifier:
                keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:72:f4:6c:84:42:9e:49:d6:3a:32:0f:0b:6b:3b:3d:5c:a2:
         40:76:0f:83:c5:56:8b:b0:15:46:bd:0d:98:c2:89:5d:08:c6:
         ec:51:02:90:71:6d:9e:a2:c6:b0:a8:06:bb:f9:9d:85:56:bf:
         31:2b:be:f2:66:19:e8:78:23:60:22:cb:13:c5:16:80:7f:9b:
         89:7b:b3:74:c2:37:8d:f1:e6:5e:ae:64:1f:28:fb:c1:22:99:
         e7:85:e9:52:a8:54:17:ba:33:77:2f:b4:3f:1e:c2:e1:6f:d0:
         98:1e:19:70:13:af:d5:72:f1:7b:9b:b8:00:a4:33:00:94:d7:
         1b:63:68:04:7b:fb:75:26:3e:58:07:b8:d0:5a:68:1c:33:cf:
         ba:cb:98:49:35:66:40:48:44:2d:da:6c:c7:60:4e:5d:32:63:
         27:76:d5:4f:d6:eb:41:c4:bd:3d:3a:0e:ae:42:5d:09:1d:4a:
         dc:a1:4e:78:53:81:33:f7:ac:74:13:aa:9e:96:06:4d:7a:61:
         81:81:cc:bd:18:62:de:a4:fd:30:2e:31:b7:cd:8c:ab:0d:53:
         35:d1:91:1d:a8:e8:e5:2d:34:24:13:5d:3a:ac:8d:dc:3c:24:
         95:3c:3c:b8:46:82:62:4a:53:25:8f:bf:66:fd:a1:9e:71:d5:
         e9:b4:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----