Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File:                     sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier:          6E7xmD2lFLpZ+5uM2ACM51Vifk/RwIL7W8amGPl0v9A=
Subject key identifier:   80:2C:47:36:36:54:B6:7F:5F:9A:7B:0C:BC:05:62:66:79:7C:7F:45
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer:       /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial:       01962F06D67794E54D83AEBDD3C9139F53AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number:          0765
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: hyhfndoa_Z24zyoZ7ygYaeGIqPw.roa (hash: 08nYzAa42CtGg2k7nkGWsd8V/SDqafxamCeCjRVW6Yw=)
                          2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: Hel/nXfPmGD7oMBXa1zIHRbQMu5EbrKiN9oMw5K02eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:77:94:e5:4d:83:ae:bd:d3:c9:13:9f:53:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=802c47363654b67f5f9a7b0cbc056266797c7f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:a4:3d:8d:c1:98:7e:d0:1c:4f:e8:f1:fe:
                    8c:c6:fa:a9:d3:e2:fd:65:e1:a0:a1:f1:b5:61:a3:
                    07:00:03:02:e8:09:03:73:48:ef:10:57:ad:61:58:
                    a9:e5:9a:ca:e8:1c:bf:f6:aa:cf:15:39:19:76:d5:
                    c5:ef:4d:a8:c8:7f:e2:38:05:c3:c9:2e:b5:b8:41:
                    7c:5a:3f:f5:48:37:e9:f3:e5:24:00:64:67:57:37:
                    83:d3:1b:9f:76:8d:55:ac:98:1e:fd:98:92:7e:bc:
                    3e:ad:3e:81:8f:29:07:60:22:86:2c:50:ba:b0:9d:
                    8b:f9:e9:e6:39:be:b1:aa:cc:c6:1c:19:ce:54:54:
                    95:fa:02:f7:6e:66:35:ab:be:78:58:45:b8:79:c2:
                    77:cd:d2:31:72:fe:89:b9:ff:d1:e7:57:35:74:10:
                    be:a9:6d:61:f4:0d:09:ae:b9:30:4b:c4:fa:7d:1d:
                    97:75:3a:fe:58:2f:fc:0c:00:cf:2b:e9:5f:ef:57:
                    4c:dd:ba:80:39:54:86:d4:49:a2:ac:ec:d1:c0:33:
                    c5:3f:45:e8:24:a6:c9:a6:82:35:aa:92:09:1a:91:
                    bf:2b:16:ca:3c:f7:64:64:7e:0f:69:34:b2:5e:ba:
                    d5:c2:ac:e4:ee:04:48:9e:99:0b:02:b4:d6:7e:40:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:47:36:36:54:B6:7F:5F:9A:7B:0C:BC:05:62:66:79:7C:7F:45
            X509v3 Authority Key Identifier:
                keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7f:e4:95:20:93:7f:50:e3:81:03:f3:12:a0:ca:f6:6c:58:
         80:a0:78:64:ed:a6:5b:d6:5f:81:b3:a6:a0:c6:ab:5f:b7:0e:
         52:99:3c:44:f0:65:bc:2a:96:67:fa:27:cb:a2:93:39:f7:28:
         48:da:63:fb:37:46:6f:7a:a3:b6:a5:2c:2a:d3:83:43:5b:a4:
         9f:1a:cd:eb:7a:44:8f:1f:17:ee:dc:f1:2e:1e:e1:b9:e2:f3:
         a1:dc:93:d1:4c:64:99:c7:6e:b5:7f:d3:8a:9b:2c:3c:8d:75:
         af:f2:60:2e:2b:0d:96:fc:1a:d4:32:a3:2f:47:b9:7a:89:d8:
         e0:5e:9b:a4:c8:f5:67:b7:6f:99:80:21:6b:6b:ca:f6:fb:9c:
         ed:3e:35:62:d2:b4:c4:86:8e:d5:21:d3:a9:fd:89:9c:af:45:
         a3:53:5d:be:0b:d5:25:f6:c7:88:f1:44:97:76:89:f1:91:f9:
         67:9c:3f:49:33:81:3e:6c:1d:d5:88:be:e6:1b:de:2d:dd:3d:
         5f:63:40:b5:6e:25:a8:11:9e:5e:8f:15:d1:95:0e:ef:2a:c9:
         21:54:f2:51:23:80:51:f1:a8:ad:c3:04:a8:98:30:0d:83:7e:
         cc:3c:0a:ba:59:7d:66:e2:e3:5c:17:e7:c3:78:da:59:02:e3:
         7d:1a:67:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----