Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File:                     SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier:          0JoK2GQZ2VSEwRbL66kngAzjToBF+M1leWI6JUX5pZ8=
Subject key identifier:   D4:96:D7:49:AC:07:54:09:88:FC:F1:0B:DB:ED:4B:C0:94:EE:64:6F
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer:       /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial:       01962F3D60C0D86457F97E77CBAB1997490A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number:          13B5
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: tza69pxQu9+x6YD8Kxu13JXCitGXR6wGYK6SL26qQq8=)
                          2: yCFTDAjAsaJLNl8E_LJGSjy8D0Y.roa (hash: 8ak/iE1MogNbSCZ97ilFzI246ohpoM35OGkp4ZMBEY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:60:c0:d8:64:57:f9:7e:77:cb:ab:19:97:49:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=d496d749ac07540988fcf10bdbed4bc094ee646f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:87:3b:e1:69:30:b4:3e:75:a4:a4:cb:69:
                    88:2b:63:20:bc:7e:b5:4a:88:a5:1d:88:b1:f8:94:
                    94:ef:29:b2:99:0b:38:b1:54:4d:06:e7:62:22:2d:
                    63:c5:d5:65:6d:c8:09:cd:bb:f3:08:d8:d7:63:58:
                    ef:f4:16:e3:dc:75:f1:e7:85:cd:7c:a1:97:a8:66:
                    38:4a:96:8d:bc:d5:53:eb:bf:38:79:7e:c6:df:41:
                    6c:09:ae:74:fc:ec:e9:21:80:32:3b:47:28:88:fa:
                    a1:9b:38:b5:32:db:4b:3b:f0:a1:74:14:0a:21:a5:
                    69:74:dc:28:1b:54:f3:53:ff:87:21:f2:f5:da:e9:
                    12:61:76:e3:4d:12:33:35:cb:00:3a:c9:d2:09:0b:
                    12:3d:04:c7:f1:a6:ce:2b:0b:92:42:9d:66:5b:54:
                    31:e2:76:1b:40:c1:b4:26:af:4f:69:cc:eb:b9:e4:
                    e5:0e:df:90:e5:03:16:f9:bb:cd:39:b7:eb:f0:ea:
                    d8:64:a7:67:5d:22:b5:cc:1d:b7:8a:eb:49:d1:46:
                    ae:f9:47:d9:4d:05:21:94:3c:74:1c:ca:16:8f:65:
                    81:a4:97:05:e9:58:39:d7:6e:70:c7:0d:e8:1b:75:
                    8d:1d:b4:5f:ea:65:8c:24:d5:e2:4e:d1:79:73:1c:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:D7:49:AC:07:54:09:88:FC:F1:0B:DB:ED:4B:C0:94:EE:64:6F
            X509v3 Authority Key Identifier:
                keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3a:bd:10:74:d5:32:ca:9b:c5:de:e5:a0:1c:d0:1f:30:ce:
         84:db:5a:6c:af:0f:c8:18:8f:e9:e9:c8:0f:aa:24:be:48:4d:
         23:58:13:e5:13:a3:c4:d0:43:08:65:e6:8e:8f:68:85:ee:07:
         18:9e:53:f0:f9:bf:54:03:14:16:ce:11:ca:d7:08:a2:41:f0:
         9f:11:12:46:e8:97:96:9b:be:8d:39:e4:41:f9:8b:9e:db:ca:
         94:54:62:0d:25:23:cd:a8:32:f2:3c:41:69:91:ef:e8:2a:d9:
         b7:82:38:64:94:53:57:a6:6d:2d:1e:5a:70:e9:dc:89:33:d2:
         41:42:e9:9c:ed:0a:d3:27:81:d1:a8:70:fe:24:fb:f3:5d:dc:
         10:fe:46:67:3d:3a:84:44:32:d5:be:68:61:12:94:7f:6d:57:
         8f:8c:2a:d8:7f:04:d1:f8:a9:d5:c1:03:1c:bb:6c:d8:18:27:
         1c:24:6b:e6:9f:06:dc:b1:ac:56:d9:54:37:6f:8c:36:a6:f3:
         82:f4:f0:22:72:0c:be:8a:d0:d1:64:54:8e:08:14:7a:8f:98:
         e9:db:b0:c6:17:e3:69:1a:51:ca:96:7c:42:e3:04:3c:15:52:
         f8:7d:dd:4b:ce:cc:3e:95:0d:73:ef:b7:ca:d5:eb:27:37:27:
         a7:b9:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----