Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File:                     scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier:          +h5XftMEkJz6ORew+5mxRgeRizYtwXqDAyuGgs6U8Qs=
Subject key identifier:   56:EA:B9:58:63:04:BD:71:B5:08:79:89:51:CC:72:FF:65:F3:CB:61
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer:       /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial:       01962DF3D7C8759A2F8D074F1FA75C73DC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number:          07A5
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: YggPTsSNi-M37lrKOeIMBOEQEh0.roa (hash: QqUu1L/3s6oQrDkvCSSy8nc3UlcW3BrRdN7rqT/pHRE=)
                          2: b4AGcn0hWNQHufubVLqGkpQqCJU.roa (hash: TffukrxORwRZt6LrZ4vP1Br2diZAMHQpSo83hi5snQM=)
                          3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: 6BLl/q773EFz+ay3H96ZwrIwhctX/2ES0xg9qSNzSAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:c8:75:9a:2f:8d:07:4f:1f:a7:5c:73:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=56eab9586304bd71b508798951cc72ff65f3cb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:8e:fe:7d:55:4c:6b:69:6e:48:b2:92:b1:
                    19:2a:1c:e6:a6:87:58:27:35:2f:0f:aa:86:eb:b3:
                    01:2e:64:ee:89:29:be:fb:e1:f2:d0:a0:c1:51:da:
                    88:c9:94:57:4e:bb:67:a0:ea:cc:02:e2:c6:70:79:
                    95:03:96:39:05:27:a8:24:aa:3b:94:b0:66:a9:5e:
                    bd:74:54:ba:94:e1:74:cf:22:c7:a2:8c:cc:92:e0:
                    26:f0:78:52:ec:c8:2f:e3:76:8b:ae:c2:7b:ee:87:
                    b6:5a:17:c2:6c:d5:a3:8f:f3:16:4e:9d:47:6c:30:
                    d8:4c:a2:52:6c:b8:75:0d:be:6c:85:6d:dd:86:61:
                    03:3a:e3:eb:60:e2:f0:bd:52:8e:60:84:fa:3e:ef:
                    52:35:b6:be:c1:30:64:11:93:ea:bc:1b:62:6c:55:
                    64:07:19:20:bd:33:9e:8b:f4:4b:b9:67:1c:e6:05:
                    5e:46:e8:58:d9:9c:dd:08:ca:1b:5a:f1:1e:0c:a7:
                    3f:30:14:61:61:7f:00:a3:5c:9e:f1:9a:b8:2e:b2:
                    9e:2b:6c:b8:bf:2a:f6:a8:1f:ea:17:68:d8:f9:9a:
                    b5:7f:98:67:b6:6e:93:98:12:c7:ff:6b:f0:5f:a5:
                    bb:4b:c8:bd:12:15:ef:c5:c6:51:4b:a3:a0:31:0f:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:B9:58:63:04:BD:71:B5:08:79:89:51:CC:72:FF:65:F3:CB:61
            X509v3 Authority Key Identifier:
                keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:8d:51:7e:96:aa:db:2e:30:59:a7:f7:47:cb:14:70:88:
         23:29:13:03:73:f2:1b:22:d9:6f:3a:2f:6e:c7:89:94:20:f1:
         97:40:25:12:5e:ed:19:e6:0b:61:28:f8:e8:f6:ab:52:f4:ad:
         6e:db:c2:f2:a6:37:ae:55:ec:5f:1c:88:3c:90:b0:1b:3c:3e:
         11:bf:18:53:68:2a:e6:20:9d:98:c8:4c:82:92:66:e1:8f:8f:
         99:7a:2e:77:81:4a:aa:38:de:b4:b6:65:c3:00:06:d2:ab:49:
         02:15:b9:69:8c:4c:0a:9b:a7:48:bd:f3:f6:ab:7b:e1:e6:3b:
         0a:89:d7:86:b1:b0:18:cb:b4:a6:ba:28:c5:82:f0:d5:2a:6d:
         eb:95:0f:86:c9:3e:3f:46:24:ca:42:19:e9:e2:a5:53:c2:c1:
         9f:7f:5f:cf:61:ad:73:72:80:31:a0:32:22:18:79:79:21:eb:
         e4:e0:f3:8e:51:a7:f6:68:60:f9:13:8b:e4:c8:c9:35:70:eb:
         f9:46:43:56:66:87:f4:b5:36:e0:7b:ec:47:eb:40:f8:49:96:
         77:98:34:f7:34:92:9f:ff:03:7f:cb:b0:6c:5c:17:d6:a6:3f:
         43:a4:4a:e3:66:9c:86:47:53:b2:e7:e0:47:ea:88:2f:4c:83:
         91:6f:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----