Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File:                     s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier:          JHksXEbz8JTmuUHKoZskXeGMT5SEIvWwYcXU4+B3T30=
Subject key identifier:   75:75:94:4F:77:D5:8E:5A:AA:F9:21:39:B8:E5:94:3B:EF:D1:72:89
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer:       /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial:       01962E2B4628459929D408EECB4E371270AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number:          04BE
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: PHlmZzsVHNdtkbgZZGVIzuxsSOI.roa (hash: nURq80w5QR4Tg4i37nqE1f7UXJnobOs0QVmX70MkIAU=)
                          2: qUlLIE5OvssPved2_GU9Z8GFglU.roa (hash: S7bFZ1rRYB+JTmrHRfuu5cY821Jfik9JjzyPO/AFRnM=)
                          3: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: PyJ2DYF5QICREd5BxmnWYPfrut9F1JEsWVuert6T+f8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:46:28:45:99:29:d4:08:ee:cb:4e:37:12:70:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=7575944f77d58e5aaaf92139b8e5943befd17289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:63:6b:19:55:cf:c7:87:b5:09:dd:d1:05:
                    6e:52:ba:9c:b4:70:1b:73:ab:5e:ba:30:d1:1f:d7:
                    bb:5f:9b:bb:f0:75:63:51:c2:58:f7:8f:43:51:d6:
                    db:24:52:67:e6:ca:03:64:0a:00:a3:92:85:bf:48:
                    68:97:69:15:74:3a:04:0c:b6:cb:dd:1a:81:db:6a:
                    24:fb:0f:7b:09:e3:1c:dc:39:0a:27:0a:5f:0d:b5:
                    11:41:0b:58:6d:58:b1:0d:1b:49:41:f7:2a:40:b3:
                    7d:39:b2:8d:2b:68:89:08:13:46:4b:0b:c6:8a:3b:
                    65:ec:54:cc:61:43:a1:3f:3d:64:bd:a5:ec:51:bb:
                    bd:43:35:e5:a4:29:d5:83:a7:2e:6a:f1:70:fb:14:
                    33:de:82:fc:25:77:61:23:82:be:30:60:d1:07:c9:
                    2f:ba:96:64:4f:6c:5e:79:07:c6:4c:4b:68:d7:b8:
                    05:21:64:ca:85:9e:86:bf:1f:f9:c9:8a:d5:70:e1:
                    78:ad:2b:18:75:ea:a7:c0:37:f0:6a:61:c2:af:94:
                    9f:39:fe:7b:e8:14:2b:4b:88:38:90:d1:2e:4e:39:
                    31:4a:d9:9c:1c:3d:c9:52:5c:33:1e:9f:52:8a:ec:
                    47:75:85:6c:24:0f:82:9e:94:0a:05:59:93:6b:d1:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:94:4F:77:D5:8E:5A:AA:F9:21:39:B8:E5:94:3B:EF:D1:72:89
            X509v3 Authority Key Identifier:
                keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:a4:b3:0b:07:29:d4:2e:96:86:65:ba:5f:30:3f:6b:fd:
         ff:ed:33:ff:86:5c:80:10:41:9f:f4:b8:2a:e5:3e:8a:f2:94:
         58:1a:84:8b:09:46:9e:cf:16:70:1b:42:20:0f:e5:1d:a9:ad:
         2d:6f:81:be:5a:da:3f:08:e5:1c:82:c0:20:44:90:a7:f0:6a:
         3e:ee:a0:7c:a8:70:b5:63:f7:74:e3:a1:f5:55:04:9d:a7:f9:
         cc:00:e6:e6:dc:51:12:18:2c:58:a7:10:0d:cf:cb:7e:ee:01:
         5c:80:82:14:1c:88:62:a4:33:a2:19:a8:8a:14:6c:86:20:e1:
         3a:ea:b2:ec:a6:4a:68:29:68:86:c9:aa:69:5c:8d:cf:98:bc:
         94:a4:07:4f:b4:98:af:57:42:7b:b6:fb:77:a6:ff:da:79:a6:
         2b:58:83:ba:07:ee:a0:88:78:b5:ff:4a:35:66:25:ea:e5:89:
         a4:31:4b:4d:b4:c2:29:4f:66:c2:46:3e:69:2d:56:8b:9c:e0:
         6c:09:8f:93:a6:a2:5d:b1:ef:18:29:69:3a:8f:02:dd:97:61:
         4d:ca:f4:f4:9d:56:45:b5:d2:57:f0:7e:10:32:13:6e:a8:29:
         85:7b:7e:52:4e:f9:fe:ee:8d:0c:da:96:25:95:b5:d0:ea:1f:
         a8:4e:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----