Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
File:                     S-G7vlQAedK38nC5LOrzsqgW6Po.mft (raw, json)
Hash identifier:          vFjfStYeG7r8KC5BQqPCqcy3Xpi45ADhblMDx4QOIY0=
Subject key identifier:   F6:A6:7A:F6:25:C7:46:7E:B6:AD:B9:8C:99:07:7E:07:5A:B6:42:95
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Certificate issuer:       /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial:       01962F3D432E2D59E551B4A342ED64163228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft
Manifest number:          0B06
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 9hr0RxcMrr0PdZUeFGL7xFCCX6M.roa (hash: c+l8O2VvW8FmRNHxjGZmeZsqcY4y9njJ0XhuiOI82Ig=)
                          2: S-G7vlQAedK38nC5LOrzsqgW6Po.crl (hash: JdW6ZAZTuTawNvCAJkpiB8eKdml8g3UwfUTd3BAuB24=)
                          3: Wo69R9wkZdSu2YDZamu1cwfnvYY.roa (hash: M7Dkgn12kNJ0G/XHeqGYMOBhXYTKj/x9/fg1DkcC9rY=)
                          4: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (hash: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=)
                          5: sxzxRsYpVJ4N1lToM8Cy5xPqMsU.roa (hash: g5PD0lSPsiV5TiY4CJ8jfV/ckG/Bc1/ChU4XFCIeK1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:2e:2d:59:e5:51:b4:a3:42:ed:64:16:32:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=f6a67af625c7467eb6adb98c99077e075ab64295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:b1:32:b0:10:2a:a6:0d:47:91:06:e4:36:
                    86:50:3c:b4:85:58:2f:8a:10:23:43:3d:d4:fd:6d:
                    b8:05:8b:99:92:bf:82:a5:12:47:3b:d1:1c:5f:91:
                    16:c3:de:61:3d:9a:72:c3:42:ac:df:15:39:00:cd:
                    d1:69:73:a9:20:84:69:6a:ea:80:29:fa:85:d7:75:
                    a6:a0:5f:4f:96:e0:8f:44:19:f3:29:15:8c:53:84:
                    64:da:5f:f0:c6:91:80:52:0d:7c:dc:45:62:80:c2:
                    d0:ba:6d:d3:09:c6:cd:16:13:24:95:9a:cd:26:9a:
                    91:d0:d3:38:69:72:7a:b7:a7:73:45:53:63:78:07:
                    e6:df:8f:b3:d9:00:f2:36:e0:83:51:bd:68:d7:94:
                    be:88:7b:65:e7:da:31:05:2a:a7:ef:a9:a9:14:81:
                    75:cf:ee:e8:8f:ac:b4:84:f1:83:47:5a:fe:d6:3b:
                    ea:8d:7c:f8:69:6a:ad:3b:f4:c7:10:7f:cb:5a:a0:
                    1a:06:b1:c4:7d:13:a7:04:a4:d4:58:b8:8b:0a:00:
                    6e:cc:2f:71:ec:7e:5e:df:74:3a:69:61:1c:34:da:
                    5c:a5:d4:f0:8e:38:07:78:b5:aa:42:7a:d4:9a:db:
                    a8:a4:0a:a2:52:e7:b3:4f:94:c8:aa:7d:cc:59:49:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:7A:F6:25:C7:46:7E:B6:AD:B9:8C:99:07:7E:07:5A:B6:42:95
            X509v3 Authority Key Identifier:
                keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:9d:8c:7f:47:7b:50:fc:1e:ae:f3:0b:a2:ba:4f:ce:f1:
         80:ed:df:ed:70:8d:82:04:46:25:64:e0:1e:5b:c8:1b:fa:b9:
         82:2f:62:12:b5:f2:84:15:d7:8c:e4:5b:e3:b4:1a:bd:58:7c:
         cb:05:fc:57:92:89:40:3d:a8:1c:4c:29:29:17:41:bb:3a:6e:
         d7:d3:72:37:5d:99:cc:c2:01:1a:71:3e:7d:b1:4c:f8:75:69:
         88:15:5a:61:83:e4:63:af:85:e3:13:49:07:bc:a0:07:49:f9:
         1d:1c:d5:bf:d1:2a:57:9c:fb:21:c6:b8:51:39:d0:51:8a:f6:
         af:6c:2d:12:07:ad:76:5e:81:bf:1a:9f:3e:41:3f:a6:fa:47:
         82:31:6d:4a:93:13:16:42:b2:9b:64:17:fa:ef:c6:68:77:9a:
         9c:d8:cd:1b:43:93:d4:55:61:7e:cf:21:dd:52:59:1f:5e:97:
         11:9a:cb:ca:13:84:ab:95:e8:20:3c:0b:90:fc:20:be:76:81:
         6b:7c:7a:14:97:99:98:71:26:14:90:7a:bf:b0:9a:ca:e2:95:
         ec:41:db:0f:4c:7a:5d:27:14:cd:10:a7:52:5c:99:4e:62:8c:
         af:65:3b:2d:a3:fe:47:c1:6a:19:e2:ad:65:f1:3a:ba:e4:ae:
         99:76:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----