Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          66MKjXKwnVFu/fto7X7313ZUp5dfZCuwNC9mwWwvCs4=
Subject key identifier:   BA:DE:34:C2:56:76:A6:13:77:BA:D6:C7:0E:21:17:C3:13:A8:E5:71
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       01962E61F42E282CAFB88538C8147C6806B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: 5YAx2RnX290U003YTb8C5+ioLQmdPNm/tNAEubA3tYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:2e:28:2c:af:b8:85:38:c8:14:7c:68:06:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=bade34c25676a61377bad6c70e2117c313a8e571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:6a:29:d1:82:db:62:44:f0:a1:42:12:c6:
                    c7:85:bc:ec:b1:5c:07:2c:f9:33:37:47:2b:cd:9c:
                    a2:94:27:3e:b8:0c:5c:7c:33:ee:cd:66:8a:3b:64:
                    c3:47:d3:c3:f3:58:09:01:25:78:89:86:8c:98:e1:
                    56:8b:81:5e:80:f1:1d:21:48:f8:e6:d5:63:4f:38:
                    04:f6:9b:17:0d:f2:a5:8d:48:ae:03:ee:02:60:40:
                    e1:fa:a6:93:fc:41:ac:b6:f5:4c:ec:74:fb:3f:61:
                    3d:99:a0:5c:02:98:38:49:11:95:be:9c:f2:c6:7a:
                    45:76:07:04:b0:09:09:4f:b4:33:d0:52:61:33:47:
                    57:e3:0a:1b:e2:b7:b0:e6:7b:b3:31:b8:dd:a8:13:
                    1c:e7:94:32:97:1b:2e:5a:f4:f7:0a:d3:43:2b:8e:
                    6b:15:6c:fe:c2:60:42:54:0f:a5:53:bd:d8:b2:93:
                    da:12:c0:50:0a:d9:16:06:62:72:f2:19:8e:04:f6:
                    f7:ea:6d:f1:3b:22:de:e2:6b:b8:4c:5f:77:84:a0:
                    cd:12:14:e5:22:55:01:76:08:bf:ba:56:c6:6e:d4:
                    ff:b5:af:5e:83:a3:52:4b:16:99:b7:27:9c:22:4d:
                    41:ad:30:0b:43:79:53:73:b6:37:e1:c3:ec:ce:54:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:34:C2:56:76:A6:13:77:BA:D6:C7:0E:21:17:C3:13:A8:E5:71
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:93:8e:d1:34:63:96:22:18:de:07:1b:cf:4e:16:9c:1d:3b:
         d8:76:2e:c4:30:27:e9:89:e9:2e:9b:c0:45:5c:24:2c:bb:76:
         5f:c7:85:0f:ae:95:2d:ef:27:08:79:1d:a8:c6:ef:8e:54:21:
         e8:80:57:a9:31:49:b9:bc:7e:5c:31:4a:92:d3:59:94:1f:c2:
         e0:6e:af:75:da:32:e5:63:2e:34:b5:ae:38:fd:48:2c:8f:ca:
         96:0f:7f:13:99:8d:c3:10:da:5c:be:59:c5:a2:b8:45:81:bd:
         b3:aa:b8:5a:9a:a0:f7:e9:37:6e:92:8b:d1:ea:8c:32:28:60:
         31:43:c1:4a:46:b3:e7:bd:84:a1:9b:af:60:bf:97:04:db:6e:
         dd:7d:9e:3f:3b:48:b1:64:5b:38:c9:7b:7d:9d:31:83:21:39:
         30:98:c7:ab:b0:14:6b:51:64:e9:f6:40:3b:50:18:a8:48:89:
         ec:09:24:f2:2e:ab:7e:17:5c:f8:66:5c:60:84:df:eb:fa:88:
         b8:df:d8:c7:ff:51:b9:69:3b:44:54:b6:53:47:b7:c5:31:48:
         e5:a3:5f:6f:57:c3:12:a3:7b:99:90:f0:8a:03:d6:85:82:b6:
         37:aa:c8:e4:56:68:40:a4:37:ff:0c:c4:92:51:83:54:9b:4d:
         ad:ad:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----