Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File:                     b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier:          XOPdXwzuFI6U4bwNA3Usdv3xwmDeKPF2NGyjr7SYNKk=
Subject key identifier:   CB:1E:BA:8A:8F:B9:02:33:8B:19:C4:E5:09:DD:E1:03:CC:80:1C:3D
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer:       /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial:       01962F0691F3D65EE0E38ECACD360F493897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number:          051B
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
                          2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: ZiMIFcBHqpMFluD+VK2aikKtwQMu9odtTQ9jDIaP/b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:f3:d6:5e:e0:e3:8e:ca:cd:36:0f:49:38:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=cb1eba8a8fb902338b19c4e509dde103cc801c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:3a:c7:1f:25:3d:f9:75:d4:7f:87:62:a5:
                    38:ef:2c:27:60:1e:09:11:aa:93:0e:9d:90:07:8c:
                    7f:00:85:3f:4a:9d:b8:99:f9:dd:6d:97:c1:27:d0:
                    89:4d:14:b7:94:bd:d4:61:53:63:e0:61:bd:99:7f:
                    8b:36:f3:c9:d6:9a:24:26:46:41:9d:83:bc:bc:81:
                    46:bf:82:d3:22:52:4b:f7:fe:b4:22:5a:39:4b:46:
                    0c:ef:a3:95:c7:82:8b:9e:ee:52:a0:8d:ee:c6:eb:
                    b6:e1:42:b4:f0:79:23:d0:cb:ba:51:55:53:ff:d4:
                    dd:50:ca:d2:f2:b1:be:43:c6:a3:90:04:9e:77:3d:
                    a3:3c:e1:d1:1f:ad:35:33:1d:06:a6:d7:a9:1e:2a:
                    89:2d:7c:b2:54:2d:52:9c:74:34:91:ea:ba:4a:a9:
                    b7:d9:50:c3:f6:30:bc:cf:8d:ae:d3:e8:e2:46:3e:
                    24:80:4e:b5:44:6a:70:2c:d6:5b:d7:4b:74:e6:2c:
                    b6:8f:d0:63:c3:97:82:67:08:4b:ef:4c:b9:ff:83:
                    db:0b:77:37:ac:83:88:e8:14:a3:09:87:92:b6:5d:
                    c3:a4:61:ec:2e:db:18:03:8f:62:7d:1a:88:82:56:
                    2b:68:31:53:c8:9d:19:45:52:52:fa:df:78:1a:41:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:BA:8A:8F:B9:02:33:8B:19:C4:E5:09:DD:E1:03:CC:80:1C:3D
            X509v3 Authority Key Identifier:
                keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:72:4f:53:89:c4:97:69:6e:2a:92:cb:f4:54:00:cd:9f:
         7d:c3:87:db:58:41:13:3b:13:b4:0a:89:3c:45:ae:63:30:77:
         e7:d4:89:4d:88:9f:e4:63:4c:c1:7f:a5:5e:c1:24:fe:d4:f8:
         28:54:54:c7:dc:fe:29:65:64:3e:72:2b:24:6d:ca:19:55:d9:
         3b:71:84:15:6c:51:53:3f:13:fc:0f:62:1d:63:1b:ca:39:8b:
         19:1f:a9:7c:f3:17:4b:8e:02:a3:47:65:9f:1e:5e:64:d9:61:
         d2:80:7a:53:8d:b4:47:46:20:4a:fc:53:80:12:71:d2:d2:7c:
         50:6f:53:71:b1:c0:1e:77:73:df:3c:67:75:92:e2:f5:31:df:
         6b:84:ed:34:52:65:40:20:d4:f7:37:dc:4d:c2:0c:71:ca:5e:
         5e:bf:1e:82:ea:e2:64:98:82:e6:43:5b:19:3e:0e:e2:1f:60:
         5b:23:56:27:2d:34:85:cb:32:49:55:98:05:74:d9:cf:ad:5b:
         4a:83:92:2c:67:a6:56:1b:88:a0:d7:3e:b7:45:bb:2c:a8:58:
         9e:bd:66:88:1a:86:98:a5:af:0c:81:21:47:1c:14:c0:d2:e8:
         e3:20:ca:78:28:92:f5:0f:b6:33:ea:14:7d:21:54:ca:0b:f1:
         eb:b8:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----