Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File:                     S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier:          Biq1rnfvWOKE4sqAhCiLXadFtkRvTf56j8+B4SiOmhU=
Subject key identifier:   83:09:E1:B8:CF:01:4C:25:3C:12:BF:4F:D3:99:8C:23:CC:18:AD:79
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer:       /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial:       01962DF41726D6D5253EF61594AA3F8E78C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number:          111A
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
                          2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: agCAMBcoQge6hXrk2AL84irdQJ7SdlEHS9A+3oxynmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:17:26:d6:d5:25:3e:f6:15:94:aa:3f:8e:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=8309e1b8cf014c253c12bf4fd3998c23cc18ad79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:33:1a:e6:e9:a2:31:cb:fd:6a:c3:ed:66:
                    99:a9:f7:90:a4:31:07:b6:11:4f:77:d3:f9:9e:81:
                    50:93:5e:4b:fe:16:36:a6:6b:d3:42:66:82:b6:96:
                    32:9f:5a:dc:23:76:1f:d2:5d:8f:9b:57:14:f5:d6:
                    0a:b1:48:65:1c:71:51:16:60:c4:4b:a0:05:25:fc:
                    ba:f6:f6:83:6a:9c:1b:46:83:c5:c4:76:fa:67:2d:
                    4e:82:c3:b6:fb:02:0e:72:0d:5a:54:63:a8:dd:64:
                    9a:c2:b4:1c:d1:69:86:b0:76:29:13:be:cb:60:ac:
                    05:2f:5b:ee:6e:c2:98:6f:82:e8:70:cd:08:35:ff:
                    8d:56:08:0e:96:48:5a:6c:15:51:5c:d5:65:73:d5:
                    e0:96:57:6c:04:bb:c3:43:d8:b9:72:04:0f:f3:ef:
                    35:08:b6:3b:cb:79:a9:ec:d9:3e:11:ce:63:33:a9:
                    06:86:76:20:97:a3:82:4f:7b:1a:85:45:fd:4f:a1:
                    a9:2a:ce:d9:8a:47:68:ea:29:e3:f2:c2:13:87:28:
                    fc:ba:45:74:5d:f9:e4:fa:b6:f6:29:88:77:54:a4:
                    06:c5:50:dd:ad:59:1d:8e:89:74:89:6b:e6:28:fa:
                    15:d8:74:3e:88:2e:3b:24:4d:91:1a:a5:68:90:66:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:09:E1:B8:CF:01:4C:25:3C:12:BF:4F:D3:99:8C:23:CC:18:AD:79
            X509v3 Authority Key Identifier:
                keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:10:12:02:03:cd:d3:6e:6b:1f:4d:a7:52:2f:84:df:59:
         80:65:fa:92:9c:ce:51:49:7a:34:c9:3a:bc:e7:af:ae:09:9b:
         9f:28:23:65:5b:3c:89:7d:8b:97:ac:6d:3e:b1:b1:29:05:66:
         2d:ae:57:97:a0:5c:0c:de:74:10:72:ae:45:db:43:d1:cd:e2:
         08:de:89:ee:d5:60:cc:d8:f7:81:eb:e3:4c:76:3e:50:0d:7a:
         49:7e:4d:3d:7c:19:86:41:cc:c0:b6:93:07:26:9e:48:2c:a3:
         9a:8d:bf:76:73:49:36:2d:ce:b5:8e:24:c8:61:b4:d8:52:e3:
         92:f6:73:c1:5b:3a:29:d7:f5:09:bd:c2:8c:cf:31:65:de:01:
         d8:5f:32:16:37:12:c5:18:01:ec:ae:fc:99:7e:bc:20:91:41:
         9c:27:31:ba:cb:07:02:18:26:b4:53:6c:c0:15:69:6d:dd:fb:
         d1:d0:3a:09:a4:e7:83:5f:ca:46:9c:62:84:96:7b:af:7e:be:
         0a:18:8a:56:8a:6d:88:aa:7b:84:d8:d8:ee:1b:cf:75:04:cd:
         7c:15:1d:3c:ad:16:18:41:0f:f5:47:61:4d:2c:ee:a9:2d:33:
         e2:23:a8:79:e2:b5:d8:aa:96:68:ee:9c:cb:d3:17:9d:1e:ca:
         75:46:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----