Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
File:                     svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft (raw, json)
Hash identifier:          0hHsJ2JInOhX3rbZ8dqZgm3xMwGZCwlbbs4UIfbvl9Y=
Subject key identifier:   A9:10:1D:90:F9:B8:57:A3:47:52:0A:1B:2A:EB:05:A8:71:16:6E:0B
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Certificate issuer:       /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial:       01962ECF8CAC8E561A20C327F527A9415192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
Manifest number:          0E7D
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (hash: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=)
                          2: svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl (hash: RBoDw+46JyGlFRxAVMIptbB2r6vWz19PukntdnD7sy4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:ac:8e:56:1a:20:c3:27:f5:27:a9:41:51:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=a9101d90f9b857a347520a1b2aeb05a871166e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:f6:60:d4:f7:57:c0:0c:f1:2c:9a:84:cd:
                    38:0e:8f:e8:bc:c9:45:ae:d1:6b:3a:06:c6:27:2f:
                    c7:ab:ff:66:3b:99:73:d5:81:5f:53:a5:8c:87:5e:
                    22:ca:b9:55:3b:3e:31:06:20:29:fc:6f:c2:82:8e:
                    18:bc:33:2a:ea:41:0b:57:ff:12:ff:b8:54:86:e3:
                    84:53:04:8e:7a:23:e8:fa:fd:38:de:00:a7:85:a9:
                    76:4f:84:af:b4:e0:2e:0d:7c:8a:d2:b4:e0:74:82:
                    e7:f2:54:ba:1c:f6:cf:8d:24:fd:f4:42:42:3d:f0:
                    df:9e:8c:76:fe:bd:dc:66:08:5a:a9:b9:6b:74:33:
                    56:a4:4c:64:ff:5e:61:01:ea:69:19:f7:96:8d:2e:
                    26:51:8d:dc:52:91:82:50:ba:44:d5:f0:09:e0:02:
                    3b:60:89:6f:97:62:45:c4:46:91:1e:fa:d1:c3:c4:
                    9f:03:b6:4e:7f:f0:13:5b:5a:8a:e3:ef:34:8e:d5:
                    a7:6b:f8:a9:12:d7:05:85:51:e5:34:c0:e9:9a:20:
                    e2:cb:8e:e3:a1:bf:1b:21:5a:30:32:ae:20:f8:78:
                    12:b8:9b:c1:6b:de:f8:8e:2d:f9:f9:2a:2c:a7:99:
                    14:bc:10:97:fd:aa:b6:0c:76:36:a8:f5:0d:29:f5:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:1D:90:F9:B8:57:A3:47:52:0A:1B:2A:EB:05:A8:71:16:6E:0B
            X509v3 Authority Key Identifier:
                keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:ab:73:03:0b:c7:b6:00:7c:af:cb:24:e3:92:8f:99:5c:
         7e:7d:48:3a:3d:c8:7a:fe:95:a8:37:be:0b:9c:24:2a:e2:93:
         f9:55:77:50:4a:53:ab:d4:a7:c5:d6:de:4b:fa:aa:55:3d:8d:
         5c:fc:e9:73:9a:c9:14:e2:aa:67:b2:f3:0e:43:e0:5a:c6:fb:
         04:d7:b4:22:73:80:47:64:85:53:5b:c1:c6:09:2e:64:f9:99:
         e6:ca:ee:3b:35:08:1a:16:4c:fd:47:22:a9:30:69:ab:95:26:
         97:44:20:62:4a:16:37:f3:06:13:3f:56:0a:f9:7b:73:57:cb:
         43:5c:58:29:1c:5e:7a:ad:65:1e:c5:0c:b9:c7:b0:28:cd:53:
         4c:ff:a1:fe:a2:7e:dd:ad:20:33:7f:1c:6e:7c:7c:69:5d:ff:
         ba:6c:e6:b3:ca:f4:61:65:44:c6:14:28:16:af:49:4e:82:07:
         bc:5f:b3:15:0a:8a:78:ff:04:55:1a:e6:bd:36:c1:7c:e3:1f:
         6d:b8:6d:09:cc:aa:bb:83:cb:02:b0:26:0a:5a:33:30:9b:aa:
         e7:be:7d:d3:9a:eb:2d:64:61:b9:35:11:b8:ec:46:7f:f9:ee:
         91:7c:c5:37:54:df:76:e1:71:63:0b:49:33:22:d9:bd:c7:5e:
         c3:b7:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----