Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File:                     sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier:          wN8sEVAnR1v0YiRU1OA5D/is7yQhRK2aWeaKBHy/cJQ=
Subject key identifier:   1B:BD:D2:FD:A9:B6:3A:6D:D7:25:41:65:51:25:66:02:AF:6B:27:36
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer:       /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial:       01962E2B38F74AD10961B25F7B6504AFEC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number:          09E0
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
                          2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: GFDGluLQYYXRLn/OwurfVUIgjjqzQe1J8EUyB7OabsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:f7:4a:d1:09:61:b2:5f:7b:65:04:af:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=1bbdd2fda9b63a6dd725416551256602af6b2736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:77:92:e3:b6:0e:9e:1c:db:d6:a7:ea:f0:
                    8e:19:28:ef:93:8a:ec:64:54:89:c2:ac:86:f4:88:
                    89:39:d5:03:1c:48:5f:26:54:23:85:b4:fb:97:15:
                    3f:3e:71:b6:ba:8e:9e:62:b6:e7:2a:f2:2c:51:62:
                    05:74:45:d7:06:32:38:13:d9:f7:dd:a2:7e:d0:df:
                    8c:8b:15:f7:da:20:93:29:45:e6:e6:ce:76:56:7c:
                    b8:67:95:d9:fa:76:33:6f:e7:07:5d:9f:52:eb:8a:
                    64:55:6c:19:88:ad:67:b2:e0:3b:55:da:5c:ed:b8:
                    17:22:67:95:3a:a7:f7:fe:a7:21:3b:6b:de:f1:b2:
                    62:95:6d:a9:66:ca:31:aa:41:99:d9:61:b3:53:03:
                    ba:b2:ce:12:35:9c:83:0d:4c:e1:d8:64:0b:a5:f2:
                    78:fa:d5:22:91:73:4b:1c:ef:8c:31:06:b2:c3:38:
                    9b:25:18:b5:d7:3f:35:8c:34:3f:2a:f9:2e:2d:90:
                    85:9f:82:1e:bf:49:dc:46:8a:b8:93:54:da:52:0b:
                    2f:b2:d4:e8:f5:e2:16:f6:ec:b9:d6:26:54:8f:ee:
                    ee:be:5d:8c:9a:5b:34:95:ad:c5:2b:44:b2:cd:54:
                    26:7e:09:a9:52:44:ce:2d:72:86:fb:84:f1:27:a0:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:D2:FD:A9:B6:3A:6D:D7:25:41:65:51:25:66:02:AF:6B:27:36
            X509v3 Authority Key Identifier:
                keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:0c:47:51:93:00:85:39:06:02:74:67:cc:11:ff:51:22:
         27:60:c5:2c:ac:3e:3d:ca:27:5f:5f:03:9d:74:e1:c0:b1:0a:
         65:9d:a9:2e:7a:84:c0:6e:77:82:78:9a:8b:b7:90:5b:0b:8d:
         d6:8c:87:43:e9:93:b5:9a:30:ee:78:6c:4e:4a:e9:95:ba:6a:
         1e:44:4f:94:25:f3:14:50:b1:ed:16:12:50:28:a0:1f:18:77:
         d4:c3:bc:62:52:67:b3:da:b7:02:80:1c:e1:f6:6e:f3:22:49:
         87:2f:c4:1e:92:52:2a:68:14:95:18:e6:a6:73:b2:9a:69:56:
         b9:73:95:fa:d0:b6:43:fc:5e:3a:fb:70:db:fd:b0:7d:e4:7f:
         8c:f5:63:3d:68:59:e4:a3:7e:3f:10:a7:8a:ca:93:5d:da:1a:
         8e:4a:6c:87:c5:a2:60:ab:64:a9:59:43:44:8d:8b:27:f2:d0:
         25:e6:72:6d:43:70:f8:8f:e0:ee:d7:1d:8b:4e:58:63:ac:54:
         01:d7:63:f2:c5:62:19:5f:b3:04:f6:a3:a6:16:fa:86:dc:0f:
         3e:c3:67:e8:ff:35:44:47:8a:55:fa:53:19:9d:41:b3:a9:10:
         46:22:31:a6:30:64:8f:da:60:1a:90:3b:f7:d1:e2:f9:c0:fe:
         e2:f5:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----