Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File:                     s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier:          Usc7dKpy6RArEbt9wfmwSEP+CWgZh1yYhqJ7Q2bXMnE=
Subject key identifier:   01:34:6A:B6:2F:2D:65:A6:D4:E5:DA:58:89:CF:1E:FC:A1:5C:A4:51
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer:       /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial:       01962DF3A259C0F94D3F4B508A4C5C0202E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
                          2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: DgtY/xKwWd7Mh6yUjUWfc85dhSkecwwWcmM5RO8gBMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a2:59:c0:f9:4d:3f:4b:50:8a:4c:5c:02:02:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=01346ab62f2d65a6d4e5da5889cf1efca15ca451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:54:9f:1e:37:8a:80:14:cf:73:79:36:60:
                    8d:c8:a3:fa:d7:da:41:4d:9a:e5:90:ef:d0:e1:f4:
                    58:78:2e:27:a3:b1:00:0a:a2:60:e5:74:e7:fb:8e:
                    63:f0:5e:7c:2a:fa:c2:86:dd:b0:ac:e2:41:c7:20:
                    ed:66:85:d6:e6:95:d5:16:78:47:34:43:4a:2e:6a:
                    5c:d0:f6:c5:55:ea:a6:ac:7d:42:2f:eb:76:1a:9f:
                    ea:83:59:39:1c:fd:a3:c6:80:29:08:f2:17:91:28:
                    0b:01:ef:80:5f:1c:1c:5b:4f:65:bf:7a:fe:e9:6c:
                    01:2b:46:49:a3:3c:74:d1:60:29:eb:12:63:27:f5:
                    ac:dc:4e:16:b9:7b:8b:1d:74:3b:52:70:ca:28:8b:
                    53:2d:80:50:2a:d0:55:b1:09:b4:0e:e9:8a:ca:5a:
                    d4:8d:5e:8b:44:4f:75:53:6f:68:2e:f0:04:75:db:
                    8f:b0:61:81:76:29:50:a1:8d:ae:15:40:34:48:89:
                    30:87:a3:ea:bc:15:ee:93:1f:a8:c5:6c:1e:8d:77:
                    6f:21:14:48:e6:d8:79:ed:f7:04:d3:f5:89:49:c2:
                    f4:e9:de:9a:4d:64:07:ad:29:13:b3:8a:a6:68:3f:
                    8f:c5:44:c6:cd:dc:e9:8d:ae:0c:84:94:41:de:b0:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:34:6A:B6:2F:2D:65:A6:D4:E5:DA:58:89:CF:1E:FC:A1:5C:A4:51
            X509v3 Authority Key Identifier:
                keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:13:7f:a8:73:fc:e1:da:84:06:7a:f2:e5:82:97:1c:a7:
         20:f3:4b:72:d3:cb:54:57:08:05:7e:b2:d3:83:94:a4:33:ff:
         d4:17:3f:02:4d:02:bd:fd:02:36:73:f8:1b:d5:7f:78:e8:84:
         9b:34:ef:07:69:89:cf:71:fc:0b:17:0f:80:3d:fd:35:94:c1:
         01:8b:9c:82:62:44:22:39:3f:d2:7b:68:cb:28:13:e5:92:30:
         19:ce:04:9d:15:03:72:66:62:50:22:16:f3:3e:cb:31:b9:23:
         23:4b:79:d4:8d:0c:47:52:5b:a6:15:ce:15:34:ef:bd:2d:3a:
         23:2d:8b:cc:dd:eb:35:03:5b:34:7f:80:5b:51:a5:68:55:c6:
         b7:db:b5:7b:eb:2c:6c:33:5c:fd:53:0b:32:04:ea:c1:95:70:
         6b:eb:91:44:72:0c:dd:c4:15:93:a0:be:97:4c:13:3d:3d:74:
         d1:cc:43:36:c4:8e:7f:5a:67:dd:f1:8d:55:8a:c6:06:3f:68:
         a6:93:01:79:d0:08:d6:df:d5:cb:3e:82:2d:dd:00:65:c8:e6:
         da:f8:82:45:27:e7:a8:b1:5a:4b:c7:31:b7:4c:a3:f9:69:f3:
         21:90:36:a0:a6:1c:24:cf:83:f1:36:8a:a3:c9:b6:33:25:18:
         3f:9b:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----